
Research
/Security News
Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
pyxis-frontend
Advanced tools
This project is a plugin to be integrated in clay-kiln to manage assets along with Pyxis Backend
The Kiln project that is going to use this plugin should set the following environment variables:
PYXIS_HOST=http://localhost:3010 // Where pyxis backend is running
PYXIS_KEY=key // Token for every request
Minimum clay-kiln version required: 8.9.0
$ npm install --save pyxis-frontend
$ mkdir PROJECT_FOLDER/app/services/kiln/plugins/PLUGIN_NAME
index.js
file in the previous directory created, importing main components for the plugin and setting them in the specific window.kiln
object.const {
NavButton,
NavContent,
Input,
Modal
} = require('pyxis-frontend');
// Used to export components to the window element
module.exports = () => {
window.kiln.navButtons['pyxis'] = NavButton;
window.kiln.navContent['pyxis'] = NavContent;
window.kiln.inputs['pyxis-picker'] = Input;
window.kiln.modals['pyxis-picker'] = Modal;
};
NavButton: Required component to set the button into the drawer.
NavContent: Component dedicated to show the content of the plugin.
Input: Component to open the Modal
for the image picker.
Modal: Component to show the image picker.
app/services/kiln/index.js
require the previous component created. require('./plugins/pyxis')();
To add custom configuration for the plugin:
window.kiln.config = window.kiln.config || {};
IMPORTANT: Custom configuration should be set before calling the plugin.
window.kiln.config['pyxis'] = {
promotionalBaseWidth: 200,
displayBaseHeight: 100
};
displayBaseHeight: Base height required to calculate the ratio for display renditions.
promotionalBaseWidth: Base width required to calculate the ratio for promotional renditions.
Check how this value help to calculate the ratios in config file.
FAQs
Pyxis frontend plugin
We found that pyxis-frontend demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Malicious update to @ctrl/tinycolor on npm is part of a supply-chain attack hitting 40+ packages across maintainers
Security News
pnpm's new minimumReleaseAge setting delays package updates to prevent supply chain attacks, with other tools like Taze and NCU following suit.
Security News
The Rust Security Response WG is warning of phishing emails from rustfoundation.dev targeting crates.io users.