
Security News
npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.
intermix-design-system
Advanced tools
This is a batteries-included starter app for developing stencil components with Storybook.
git clone https://github.com/tsukhu/intermix-design-system.git
cd intermix-design-system
git remote remove origin
npm install
npm run storybook
@Props on your components
This app was generated by using npm init stencil and selecting the "component" starter. After the app was generated, the following actions were performed. You should be able to follow these steps to integrate storybook into your existing stencil project:
The following folders/files were written for this project and should be copied/merged into your project:
.storybook/babel.config.jssrc/custom.d.tsUpdate the "compilerOptions" in your tsconfig to include the following:
"skipLibCheck": true
Install all of the dependencies
npm install storybook webpack glob case babel-loader typescript awesome-typescript-loader babel-plugin-dynamic-import-node npm-run-all @babel/core @babel/preset-env @babel/preset-typescript @storybook/html @storybook/addon-info @storybook/addon-knobs @storybook/addon-notes @storybook/addon-viewport @types/jest @types/storybook__html @types/storybook__addon-knobs -D
NOTE: it looks like a lot... it is. All of the above are necessary except
npm-run-all(see next step).NOTE: you will get a lot of warnings about missing react dependencies and outdated packages. You will have to ignore these or go bug the project maintainers about managing dependencies a little better.
Add the following to the "scripts" section of your package.json. If you chose not to install npm-run-all, you will need to update your scripts so that stencil will run watch in "prod" mode while the storybook server is running.
"watch": "stencil build --docs --watch",
"storybook.run": "start-storybook --port 9001",
"storybook": "npm-run-all --parallel watch storybook.run"
Finally, start the storybook server and check out all your component stories!
npm run storybook
Well, it's complicated. All you really need to know is that the code in the project should generate a story for every component in your project along with knobs for all of your exposed @Props. If your project structure is different than the one here, you will need to update the code at the top of .storybook/stories/stencil.js to point to the correct locations. For more advanced stenarios, check out the .story.js file inside src/components/simple-config.
Stencil is a compiler for building fast web apps using Web Components.
Stencil combines the best concepts of the most popular frontend frameworks into a compile-time rather than run-time tool. Stencil takes TypeScript, JSX, a tiny virtual DOM layer, efficient one-way data binding, an asynchronous rendering pipeline (similar to React Fiber), and lazy-loading out of the box, and generates 100% standards-based Web Components that run in any browser supporting the Custom Elements v1 spec.
Stencil components are just Web Components, so they work in any major framework or with no framework at all.
To start building a new web component using Stencil, clone this repo to a new directory:
git clone https://github.com/ionic-team/stencil-component-starter.git my-component
cd my-component
git remote rm origin
and run:
npm install
npm start
To build the component for production, run:
npm run build
To run the unit tests for the components, run:
npm test
Need help? Check out our docs here.
When creating new component tags, we recommend not using stencil in the component name (ex: <stencil-datepicker>). This is because the generated component has little to nothing to do with Stencil; it's just a web component!
Instead, use a prefix that fits your company or any name for a group of related components. For example, all of the Ionic generated web components use the prefix ion.
<script src='https://unpkg.com/my-component@0.0.1/dist/mycomponent.js'></script> in the head of your index.htmlnpm install my-component --save<script src='node_modules/my-component/dist/mycomponent.js'></script> in the head of your index.htmlnpm install my-component --saveimport my-component;FAQs
Stencil based design system
We found that intermix-design-system demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
npm confirmed a tooling bug incorrectly marked several one-character packages as security holders and said it was working on a rollback.

Research
/Security News
Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Research
Socket found 37 malicious PyPI wheels that abuse Python startup hooks to launch a Bun-powered credential stealer tied to Mini Shai-Hulud/Miasma.