
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
design-system-test
Advanced tools
React components and css styles library for use in Livechat products. By creating a uniform system, we want to deliver a harmonious experience to our customers. For someone who’s already used one of our products, the transition to another one would be smooth and intuitive.
To install LiveChat Design System Components Library with npm, run the following command:
npm install --save @livechat/design-system
Libary has separate css file with components styles. You need to import it in your app as well. You can find it in node-modules/@livechat/design-system/dist/design-system.css
git clone https://github.com/livechat/design-system (or download zip)cd design-systemnpm installstyleguide: run styleguidist server with eslint at http://localhost:6060styleguide:build: run styleguidist buildstart: bundles the library with watch flag, usefull for development with external app instead of styleguidistbuild: bundles the library with rollup to the dist dirprebuild: removes build directory (before build script)prepare: runs both before the package is packed and published and on local npm installpredeploy: runs before deploying design system guide to github pagesdeploy: deploy design system guide to github pagestest: runs teststest:coverage: runs tests with coverage reporttest:watch: runs tests in watch modeA typical UI component should comply with the following guidelines:
className and style props declared.You can view and test your component in two ways:
You should start with executing these two commands:
npm linknpm link @livechat/design-systemYou can run build script after new changes (or use npm start) or if you are using webpack just add to webpack.config.js few lines to see changes without unnecessary bundling library:
const designSystemComponentsPath = fs.realpathSync(
path.resolve(__dirname, '../node_modules/@livechat/design-system/src')
);
const designSystemDistPath = fs.realpathSync(
path.resolve(__dirname, '../node_modules/@livechat/design-system/dist')
);
...
resolve: {
alias: Object.assign({}, {
'@livechat/design-system/dist': designSystemDistPath,
'@livechat/design-system': designSystemComponentsPath
}),
},
...
That way you will need to install classnames and configure css modules for library
(in example new webpack config which runs dev server after command npm start:ds:
rules: [
{
test: /\.css$/,
include: [designSystemComponentsPath],
use: ExtractTextPlugin.extract({
fallback: 'style-loader',
use: [
{
loader: 'css-loader',
query: {
modules: true,
localIdentName: 'lc_[local]'
}
},
{
loader: 'postcss-loader',
options: {
ident: 'postcss',
}
},
],
}),
},
]
If you want to learn more about npm link read this basic article
npm run-script styleguidisthttp://localhost:6060Styleguidist monitors the <root-dir>/src/components directory for components. Nevertheless, examples are user-defined in a <Component-name>.md file within the subdirectory of the component. Remember to add your new component in setup.js to see it in docs.
Unit and snapshot tests, uses Jest as test runner.
npm run test or npm run test:watch for run the test optional with watching modeIstanbul is used for code coverage and reporting, so:
npm run coverage and check your testing skillsnpm run build for bundle libraryFAQs
LiveChat Design System React components with css styles
We found that design-system-test demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.