
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
quantum_components
Advanced tools
Made with create-react-library
npm install --save quantum_components
import React, { Component } from 'react'
import MyComponent from 'quantum_components'
class Example extends Component {
render() {
return <MyComponent />
}
}
npm run build
src/index.tsnpm run build for error checking"version": "1.0.1" -> "version": "1.0.2")npm publish) don't forget to commit new package.json changes to masternpm update quantum_components and check changesLink for checking package version https://www.npmjs.com/~quantum-codemotion
To run a live-reload Storybook server on your local machine:
npm run storybook
You can then serve the files under storybook-static using S3, GitHub pages, Express etc.
I've included a handy NodeJS util file under util called create-component.js. Instead of copy pasting components to create a new component, you can instead run this command to generate all the files you need to start building out a new component. To use it:
npm run generate YourComponentName
This will generate:
/src/components
/YourComponentName
YourComponentName.tsx
YourComponentName.stories.tsx
YourComponentName.scss
The default templates for each file can be modified under util/templates.
Don't forget to add the component to your index.ts exports if you want the library to export the component!
MIT © Mansur Mabo
FAQs
Quantum components library based on AntD
The npm package quantum_components receives a total of 2 weekly downloads. As such, quantum_components popularity was classified as not popular.
We found that quantum_components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.