Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
slippers-ui
Advanced tools
Slippers is the open-source Marketing Web Design System. In the spirit of "everyone can contribute", creating guidelines that enable people to build better web pages faster makes more impactful work. Learn more about design systems.
We're always looking for feedback to improve the experience of working with Slippers. We are actively welcoming contributions, no matter how small. Feel free to submit an issue or open a merge request! Even opening an issue oh how to help is more than welcome.
nvm install
to install the same version of node as listen in .nvmrc
.nvm use
to allow nvm to match your working version of node to the one found within the repository.yarn
to install storybook
, tailwindcss
, and their dependenciesyarn start
to watch for changes within vue
files within ./stories
directory on port 6006yarn build-storybook
to build to /storybook-static
directoryTo build the entire library, run
yarn build
We use Vue CLI to build our components using the library target. vue.config.js
has some of the configuration options set up, and is extensible.
The yarn build
command chains the Vue CLI script with the PostCSS script:
"build": "vue-cli-service build --target lib --name slippersComponents src/main.js && yarn build:css"
Right now we target src/main.js
as the entrypoint for the library, which in turn pulls in components we manually specify. We extract (and ignore) CSS from this build, because after the Vue CLI runs its build process, PostCSS runs our Tailwind build step.
The build step creates these files:
The order of those build commands matters, since the build
command in Vue CLI will automatically remove the dist/
folder first. We can disble this if need to change the ordering.
tailwind.config.js
, where you can overide or extend TailwindCSS's default configurationFAQs
GitLab Marketing Design System
The npm package slippers-ui receives a total of 1,325 weekly downloads. As such, slippers-ui popularity was classified as popular.
We found that slippers-ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.