
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
npm install --save disco-ui react
# or
yarn add disco-ui react
If you wish to work on the Disco UI library while importing it into your own app, you can do so for instance using npm link
or yarn link
.
Set up the Disco UI repo:
git clone https://github.com/discoxyz/disco-ui.git
yarn install
yarn link
yarn run watch
In your app you can then run:
yarn link disco-ui
Your app will now use your local copy of Disco UI and should receive any changes as you make them.
If you wish to work on the Disco UI library directly, you can do so without another app:
git clone https://github.com/discoxyz/disco-ui.git
cd disco-ui
yarn install
yarn run install-peer-deps # necessary for storybook to run
You can now run yarn run storybook
to work on individual components, or yarn run server:start
to run the example create-react-app app.
Note that once you have run install-peer-deps
in your local Disco UI library, if you are also linking it to your app then your app will end up with duplicate copies of Disco UI's package.json
's peerDependencies
, and so React will probably break. To resolve this, you will have to link these dependencies: navigate to <your-app>/node_modules/<peer-dep>
and run yarn link
, repeat for all peer dependencies, and then return to the disco-ui
directory and run yarn link-peer-deps
. See this article for more context. Note that these will have to be re-linked if node_modules
gets deleted.
yarn cache clean
yarn.lock
node_modules
(note: this unlinks any packages that were linked)yarn install
dist
by the yarn copy-files
script, which gets run at the beginning of yarn watch
. If you've added/renamed image files since you started that, either restart it or run yarn copy-files
find node_modules -type l | grep -v .bin | xargs -r file | sort
- view all packages in the current repo that are linked (and see where they're linked to)find ~/.config/yarn/link -type l | xargs -r file | sort
- view all packages set up to be linkable (and the links point to)
~/.config/yarn
is the default location for user Yarn stuff on Linux/macOS, but could potentially be different on your machine. On Windows links are in %LOCALAPPDATA%\Yarn\config\link
or %LOCALAPPDATA%\Yarn\Data\link\
)FAQs
UI components for the decentralized identity ecosystem
The npm package disco-ui receives a total of 5 weekly downloads. As such, disco-ui popularity was classified as not popular.
We found that disco-ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.