Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
react-scrabble
Advanced tools
The familiar scrabble word game written in React.js
The data should be of the following form
const data = [
{
word: 'FAR',
hint: '3 letter word that means not so close'
},
{
word: 'PERIODIC',
hint: '8 letter word, your timetable has this'
}
]
You can initialise the board by passing the data props
import {Board} from 'react-scrabble'
class App extends Component {
render() {
return (
<Board data={data}/>
);
}
}r
cd react-scrabble/
yarn install
yarn run storybook
npm run lint
: Lint all js filesnpm run lintfix
: fix linting errors of all js filesnpm run semantic-release
: make a release. Leave it for CI to do.npm run storybook
: Start developing by using storybooknpm run test
: Run tests. tests file should be written as *.test.js
and using ES2015npm run test:watch
: Watch tests while writingnpm run test:cover
: Show coverage report of your testsnpm run test:report
: Report test coverage to codecov.io. Leave this for CInpm run build
: transpile all ES6 component files into ES5(commonjs) and put it in dist
directorynpm run docs
: create static build of storybook in docs
directory that can be used for github pagesLearn how to write stories here
MIT
FAQs
The scrabble board game written in React
We found that react-scrabble demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.