
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
remultiform
Advanced tools
The React multipage form builder
Warning: Remultiform is still in beta. No promises of API stability are made.
Install the package from NPM in the usual way. Remultiform supports React 16 or newer. You will need to install it as a peer dependency.
npm install remultiform react@">=16"
or
yarn add remultiform react@">=16"
Note that to use the useDatabase
React hook, you will need to be using React
16.8 or newer.
See the documentation website (generated with TypeDoc).
We use Jest for testing.
To run the unit tests:
npm run test:unit
To run the unit tests, updating changed snapshots:
npm run test:unit:update
To run the tests for all examples, including building:
npm run test:examples
To run the tests for all examples, including building, updating changed snapshots:
npm run test:examples:update
To run the full test suite, including building:
npm run test:all
To run the full test suite, including building, updating changed snapshots:
npm run test:all:update
To run the full test suite, including format checking, linting, and building:
npm test
To run the full test suite, including format checking, linting, and building, fixing any issues and updating snapshots:
npm run test:update
We use TypeDoc to generate our documentation website from the types and comments in our code. We use GitHub pages to host that site.
TypeDoc has a syntax similar to that of JSDoc, but unlike with JSDoc, we shouldn't specify types or label every property or argument, as they are generated from the TypeScript directly. See here for the syntax supported by TypeDoc.
To generate the documentation locally:
npm run build:docs
You can test the output by opening tmp/docs/index.html
from your local
filesystem in your browser.
We use Prettier to format our code. There are lots of editor integrations available, and the style is enforced by a Git pre-commit hook.
To run the formatter:
npm run format
We use ESLint, in addition to TypeScript's compiler, for verifying correctness and maintainability of code.
To run the linter:
npm run lint
To run the linter in fix mode:
npm run lint:fix
We can also check that all files (except package.json
and package-lock.json
because Dependabot can get very noisy) have code owners:
npm run lint:codeowners
Create a new branch called release/vx.y.z
, where x.y.z
is the new version
number, following Semantic Versioning.
Update CHANGELOG.md
to batch the changes in this version under a heading in
the following format:
## [Unreleased]
## [x.y.z] - DD-MM-YYYY
### Added
...
## [a.b.c] - DD-MM-YYYY
### Added
...
[unreleased]:
https://github.com/LBHackney-IT/remultiform/compare/vx.y.z...HEAD
[x.y.z]: https://github.com/LBHackney-IT/remultiform/compare/va.b.c...vx.y.z
[a.b.c]: ...
Commit the changes as "Update the changelog in preparation for vx.y.z
".
Run the version bumping script:
bin/bump-version "x.y.z"
Push the branch and create a pull request, copying the contents of this version from the changelog into the description.
Get the pull request reviewed.
When approved and ready to publish:
bin/publish "x.y.z"
Merge the pull request and publicize the release.
We use ADRs to document architecture decisions that we make. They can be found
in docs/adr
and contributed to with
adr-tools.
[0.2.0] - 25-03-2020
idb
from 4.0.5
to 5.0.1
onSubmit
prop for SubmitType
to return a boolean statusFAQs
The React multipage form builder
The npm package remultiform receives a total of 0 weekly downloads. As such, remultiform popularity was classified as not popular.
We found that remultiform demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.