Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
perdoo-ui
Advanced tools
Node.js >= v8 must be installed.
yarn
in the root directory to install all dependencies.yarn start
will run a development server with the storybook app at http://localhost:3000 with hot module reloading.There are two kinds of tests, lint tests & unit tests
yarn lint
will run the linter and report and errors it finds.
yarn test
will run the unit tests and report any failures it finds.
Every test suite is split into two categories, one for testing output layout (Snapshot tests), and one for testing the functionalities.
Make sure any new suites are split into the two categories
When you expect a snapshot to update because of a change in the source code, make sure you update the snapshots by running yarn test -u
before pushing. Run this only if your component layout or styles have changed. If your snapshot test is failing without a layout or style change, it indicates an error in either the component, or the test itself. Do not run the command with the -u
flag unless absolutely sure.
develop
. The branch name should be release/X.X.X
, where X.X.X is the version.package.json
version.CHANGELOG.md
. Be sure to update the version and date if you copy a previous version's changelog. Also make sure to correctly separate out Bugfixes
and Improvements
.npm publish
(NOT yarn publish
). This will run tests and publish. Enter 2FA code, if you've enabled it for your account.develop
. Tag this merge commit as vX.X.X
and push the tag. Make sure the tag begins with the little v
.master
, and develop
.develop
to master
by raising a pull requestbuild
: Runs tests, generates the test results, and builds the storybook app for deployment on Herokubuild-demo
: Builds the storybook into a build
foldercompile
: Runs tests, and bundles the components for publishing to npmdevelop
: Starts babel
in watch mode, useful when using yarn workspaces for coupled development with perdoo-web-app
lint
: Starts the linter on the codebaseprepublishOnly
: Runs before an npm publishstart
: Starts a storybook app in development mode (with hot reloading)test
: Runs unit tests (Jest + Enzyme)FAQs
Perdoo UI components
We found that perdoo-ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.