Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
react-wave-player
Advanced tools
A React component for playing audio files with audio waveform visualization, built on top of Web Audio API and HTML5 Canvas (using wavesurfer.js).
There are two methods for getting started with this repo.
git clone git@github.com:KaiHotz/react-rollup-boilerplate.git
cd react-rollup-boilerplate
yarn install
Click here to download the .zip file. Extract the contents of the zip file, then open your terminal, change to the project directory, and:
yarn install
To start the developing run :
yarn start
This will build a version of your library, run the watcher and also run Storybook.
To open Storybook manually open your Browser and navigate to http://localhost:6060.
Start developing your components in src/components
folder and update the src/index.js
file accordingly.
Always provide an YourComponent.story.tsx
file, so your component will show up in Storybook.
You can refer to example Button
component, but I think you'll get the idea.
For smoother development some Babel plugin are included
SCSS
and CSS
are supported out of the box just import your styles into your component like you normally would do.
For the use of CSS Modules
refer to rollup-plugin-postcss
Testing is done with Jest and @testing-library/react
You can refer to Button.test.js
as an example.
yarn test
or (for getting coverage)
yarn test:coverage
Linting is set up through ESLint and configured with eslint-config-react-app and
eslint-config-prettier.
You can modify linting rules by overriding them in the .eslintrc.json
file.
yarn lint
or (if automatic fixing is possible)
yarn lint:fix
To release your library to NPM or your private Registry, make sure you have an active account at NPM, your .npmrc
file is correctly setup and the repository url in package.json
file is set to your repository url, then:
yarn release
For custom layouts, styling and more information about Storybook, please refer to Storybook documentation.
Make sure the repository url in package.json
file is set to your repository url, then:
yarn deploy
yarn start
: Only serves Storybook.yarn build
: Builds your library (build can be found in dist
folder).yarn storybook:build
: Builds the static Storybook in case you want to deploy it.yarn test
: Runs the tests.yarn test:coverage
: Runs the test and shows the coverage.yarn lint
: Runs the linter, Typescript typecheck and stylelint.yarn lint:fix
: Runs the linter, Typescript typecheck and stylelint and fixes automatic fixable issues.yarn eslint
: Runs only the JavaScript linter.yarn eslint:fix
: Runs only the JavaScript linter and fixes automatic fixable issues.yarn stylelint
: Runs only the style linter.yarn stylelint:fix
: Runs only the style linter and fixes automatic fixable issues.yarn check-types
: Runs typescript type checker.yarn release
: Publishes your Library on NPM or your private Registry (depending on your config in your .npmrc
file).yarn deploy
: Deploys the Styleguide to GitHub Pages.FAQs
A React component for playing audio files with audio waveform visualization, built on top of Web Audio API and HTML5 Canvas (using wavesurfer.js).
We found that react-wave-player demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.