
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
polymer-pattern
Advanced tools
npm i -g polymer-pattern
This is a project that allows you to easily create pattern libraries, with pure webcomponents using polymer (or lit). It bundles
all of your components together with the needed polyfills so that you only need one js file (dist/components.min.js).
If we create a hello-world pattern library with a primary-button web component:
├─┬ hello-world
├─┬ src
| └─┬ primary-button
| ├── component.js
| ├── story.js
| └── styles.less
├─┬ test
| ├─┬ primary-button
| | ├── primary-button_test.js
| | └── primary-button_test.html
| └── index.html
└─┬ dist
└─ components.min.js
To create this example:
npm i -g polymer-pattern
pattern new hello-world
cd hello-world && npm i
pattern g primary-button
pattern build
pattern new [name]
pattern new [name] --type lit
After creating a new pattern you can:
cd [name] && npm i
Inside your pattern repo
pattern g [component-name]
This will create a polymer or lit component (based on your .pattern type).
It will also generate the story.js, styles.less and the test files.
Inside your pattern repo
pattern d [component-name]
Inside your pattern repo
pattern build
In your dist folder will find the components.min.js
Inside your pattern repo
pattern serve
This will generate a storybook of all your component stories at localhost:9001
Inside your pattern repo
pattern test
Inside your pattern repo
pattern sketch
This will output a stories.asketch.json file. You will need to install this sketch plugin asketch2sketch.sketchplugin
This uses a variety of other resources:
FAQs
Develop pattern libraries with polymer
We found that polymer-pattern demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.