
Product
Introducing Webhook Events for Alert Changes
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.
User interface component library
Kolibri UI contains presentational React components that we use to make Dossier ProFile. It also contains a documentation app, a test suite, and a hot-reloading server for developers.
The development environment is provided through create-react-app. This means we don't have to maintain a build configuration, which saves a lot of work for us, will still providing an awesome development environment.
The actual library distribution is built by Babel, and does not even know about create-react-app.
Add as dependency: yarn add kolibri-ui or npm install kolibri-ui
Import component: import {SmallSpinner} from "kolibri-ui/components/SmallSpinner";
Import less for component: @import "~kolibri-ui/styles/components/SmallSpinner";
Import less for all components: @import "~kolibri-ui/styles/main";
TODO
yarn install inside the kolibri-ui folderyarn run shows a list of the available commandsyarn dev-tmux runs start, watch-css and test in three different tmux panes, provided tmux is runningyarn start runs the hot reloading serveryarn watch-css live-rebuilds the less-filesyarn test runs the test suiteyarn build-app builds the documentation appyarn build-lib builds the component libraryyarn deploy deploys the documentation app to Github PagesWhatever you do, DO NOT RUN yarn run eject . The whole point of using create-react-app is to not deal with configuration. At least ask me (jbe) first!
Testing is provided by create-react-app, and uses Jest. See this link for documentation on how to write tests, expectations, mocks and so on.
Because this project uses create-react-app to provide its features, almost everything is documented there. They also have instructions for how to migrate to newer versions .
Create-react app already provides lint configuration (and optionally flow), which will integrate with many editors.
If you want to add this repository as a project subfolder within a larger project, IntelliJ supports multiple VCS roots natively. Just check out the project in a subfolder, then go to Settings, and then Version Control, and add the folder to the list. If you do this, you will still have to make sure that commits get meaningful messages, end up in the correct branch, and push them to Github. It is might be easier to use git directly.
If you are new to git, this is a very quick intro.
We use pull requests to review changes before pulling them into the master branch. Therefore, all work should happen within feature branches that can be reviewed on git. Github has a quick overview of this process. Atlassian also has a nice guide that goes more in-depth with actual command line examples.
Packages must not be published to npm/yarn before they have been reviewed.
git branch .. create a branch, list branches, delete branchesgit checkout --track .. create a branch tracking an existing remote branchgit checkout .. switch to a branchgit add .. add files to the staging areagit commit .. commit the staging area to HEAD (the current branch)git pull pull remote changes into the current branchgit merge master merge changes from the master branch into the current branchgit rebase master .. re-base the current branch on top of new changes from the master branch. Explained here.git push push the current branch to the remote tracking branch (Github).FAQs
**User interface component library**
We found that kolibri-ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.

Product
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.