
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
perdoo-ui
Advanced tools
Node.js >= v8 must be installed.
yarn
in the root directory to install all dependencies.yarn start
will run a development server with the storybook app at http://localhost:3000 with hot module reloading.There are two kinds of tests, lint tests & unit tests
yarn lint
will run the linter and report and errors it finds.
yarn test
will run the unit tests and report any failures it finds.
Every test suite is split into two categories, one for testing output layout (Snapshot tests), and one for testing the functionalities.
Make sure any new suites are split into the two categories
When you expect a snapshot to update because of a change in the source code, make sure you update the snapshots by running yarn test -u
before pushing. Run this only if your component layout or styles have changed. If your snapshot test is failing without a layout or style change, it indicates an error in either the component, or the test itself. Do not run the command with the -u
flag unless absolutely sure.
develop
. The branch name should be release/X.X.X
, where X.X.X is the version.package.json
version.CHANGELOG.md
. Be sure to update the version and date if you copy a previous version's changelog. Also make sure to correctly separate out Bugfixes
and Improvements
.npm publish
(NOT yarn publish
). This will run tests and publish. Enter 2FA code, if you've enabled it for your account.develop
. Tag this merge commit as vX.X.X
and push the tag. Make sure the tag begins with the little v
.master
, and develop
.develop
to master
by raising a pull requestbuild
: Runs tests, generates the test results, and builds the storybook app for deployment on Herokubuild-demo
: Builds the storybook into a build
foldercompile
: Runs tests, and bundles the components for publishing to npmdevelop
: Starts babel
in watch mode, useful when using yarn workspaces for coupled development with perdoo-web-app
lint
: Starts the linter on the codebaseprepublishOnly
: Runs before an npm publishstart
: Starts a storybook app in development mode (with hot reloading)test
: Runs unit tests (Jest + Enzyme)FAQs
Perdoo UI components
The npm package perdoo-ui receives a total of 22 weekly downloads. As such, perdoo-ui popularity was classified as not popular.
We found that perdoo-ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.