Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
React component library
TL;DR? Take a look at the contributing section, and fire it up on your local machine.
This project aims to build a simple component library that can be dropped into any React project with ease. It will follow atomic design principles meaning the end user has the option to use pre built templates for login, sign - up, dashboards etc. and the low level components such buttons as form controls so the user can build custom experiences. Imprest will also make no assumptions about your applications and provide a view layer only (i.e. no redux or form libraries).
In order to make Imprest an appealing choice amungst all the other component libraries. Imprest will look good out the box, and adapt to any brand of your choice. Since the theme is injected via context, you can share components across apps with different branding!
Take a look at src/styles
for mor information on how theming is configured
I'd love for people to help get involved in this project and am open to help from people of all levels of experience in React.
To contribute please follow the following steps to get this project setup on your local computer:
yarn install
to get fetch the dependencies.yarn dev
and navigate to http://localhost:1234 on your browser to see the development playground. Code for this website can be found in docs/index.tsx
.yarn link
in this repository & then yarn link imprest
from within a project you wish to use this. Then you can use import { Button } from 'imprest';
to access the library!Any questions, HMU on twitter @_lukeharris
FAQs
A react component library aimed at those who need a solid foundation of react components and view templates that scale with their projects' needs.
The npm package imprest receives a total of 7 weekly downloads. As such, imprest popularity was classified as not popular.
We found that imprest demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.