
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
mrv-design-system
Advanced tools
`mrv-design-system` is a library built to help developers and designers to create consistent, beautiful and accessible digital products
mrv-design-system
is a library built to help developers and designers to create consistent, beautiful and accessible digital products
For learning how to use the library, please check the docs: https://eloquent-ardinghelli-8232c7.netlify.com/
Install all the dependencies with yarn install
. You can use Storybook to test the components in real time when developing them by running yarn storybook
.
To completely build the lib, run the yarn prepare
command.
The visual tests use Docker to run, so you will need it in order to run all the tests of the project.
yarn test
.yarn test:jest
.yarn test:visual
.When a visual change is created (due to spacing, colors, new components, etc), you need to run the visual tests to create the new snapshots and run yarn backstop:approve
to approve the new visual changes. More info about BackstopJS can be checked here: https://github.com/garris/BackstopJS
To test the library with a local project (target project), we recommend using the library yalc: you can install it globally with npm i -g yalc
.
After doing the changes you want, publish (this is a local publish) the library with yalc publish
and install it in the target project with yalc add mrv-design-system
.
If you installed some dependency in the library, you will need to update the dependencies in your target project (yarn install
) after running yalc add
.
FAQs
`mrv-design-system` is a library built to help developers and designers to create consistent, beautiful and accessible digital products
We found that mrv-design-system demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.