Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
flystyles
Advanced tools
The project can be installed via Bower, npm or rails indicating the git repository and the release (tag/version). The repository is private, so you will need a ssh key and permissions to see the repository.
bower install git@github.com:peertransfer/flystyles.git#0.0.1
npm install git+ssh@github.com:peertransfer/flystyles.git#v0.0.1
The project has a gem, so just include in Gemfile
gem 'flystyles', git: 'git@github.com:peertransfer/flystyles.git', 'tag': 'v0.0.4'
and execute bundle
.
A compiled version of the CSS is provided in /dist
folder.
To compile a new version:
Install dependencies:
npm install
Compile CSS:
npm run build
All components in flysyles are documented in /docs
folder. The styleguide is created with Jekyll.
First go to /docs
folder and install jekyll:
bundle install
To create the build files (in /dist
folder) execute:
bundle exec jekyll build
To launch jekyll local server:
bundle exec jekyll serve
Styleguide Driven Development (SDD) is a practice that encourages the separation of UX, Design & Frontend from Backend concerns. This is achieved by developing the UI separately in a styleguide.
By separating the UI and backend tasks so they don’t rely on each other, it allows teams to iterate fast on prototypes and designs without having to make changes to the backend. With careful planning they should plug-and-play together nicely.
To document a new component, a new markdown file has to be added to src/_docs/components
. This file has a Front Matter where you have to specify the category and the name of the component:
---
title: Buttons
description:
category: components
---
To help in developing workflow, a Browser Sync is provided that watch local changes and refresh the browser. That way, when we need a new component, It can be created directly in the styleguide that gets the styles from Flystyles, achieving the Styleguide Driven Development (SDD).
To run the server, execute in /docs
folder:
npm install
npm run serve
For the moment, the project is hosted on Netlifly flystyles.netlify.com. To deploy the build files, you have to create an account in Netlifly, install netlify-cli
and deploy:
npm install netlify-cli -g
cd docs/
netlify deploy dist
FAQs
Flywire UI Framework
The npm package flystyles receives a total of 256 weekly downloads. As such, flystyles popularity was classified as not popular.
We found that flystyles demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 14 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.