Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
slippers-ui
Advanced tools
Slippers is the open-source Marketing Web Design System. In the spirit of "everyone can contribute", creating guidelines that enable people to build better web pages faster makes more impactful work. Learn more about design systems.
We're always looking for feedback to improve the experience of working with Slippers. We happily accept contributions, no matter how small. Feel free to submit an issue or open a merge request!
With Slippers, we have an edited configuration of Tailwind with a configuration file that exists on the root directory as tailwind.config.js
. We would recommend examining that file before trying to use the library to understand how our setup compares against TailwindCSS's default configuration. While our configuration will affect which utilities are available in comparison to their documentation, using their own robust search is a good place to start.
For example, all of our utility names are prefixed with slp-
as seen on within the config file.
We have changed the root em to 10px to align with how about-gitlab currently works. Note this affects how TailwindCSS is built compared to their docs, specifically classes that use rem
as their unit of choice.
Storybook is our isolated UI to code environment for creating anything from blocks and components to layouts and webpages. We are using Vue as our front-end framework for achieving this. The main concept behind storybook is:
component.stories.js
file. Storybook is able to interpret these stories and render out different states of that component to the browser.This article is a good practical example on how Storybook works and how to use it.
Gotchas: Args in Storybook vs Props in Vue
Slippers is build with VueCLI, Storybook, and TailwindCSS.
nvm install
to install the same version of node as listen in .nvmrc
.nvm use
to allow nvm to match your working version of node to the one found within the repository.yarn
to install storybook
, tailwindcss
, and their dependenciesyarn start
to watch for changes within vue
files within ./stories
directory on port 6006yarn build-storybook
to build to /storybook-static
directoryTo build the entire library, run
yarn build
We use Vue CLI to build our components using the library target. vue.config.js
has some of the configuration options set up, and is extensible.
The yarn build
command chains the Vue CLI script with the PostCSS script:
"build": "vue-cli-service build --target lib --name slippersComponents src/main.js && yarn build:css"
Right now we target src/main.js
as the entrypoint for the library, which in turn pulls in components we manually specify. We extract (and ignore) CSS from this build, because after the Vue CLI runs its build process, PostCSS runs our Tailwind build step.
The build step creates these files:
The order of those build commands matters, since the build
command in Vue CLI will automatically remove the dist/
folder first. We can disble this if need to change the ordering.
yarn prettier:check
. If you would like Prettier to format your entire repo automically, run yarn prettier:write
. You may also pass your own arguments to prettier by running yarn prettier
.FAQs
GitLab Marketing Design System
The npm package slippers-ui receives a total of 1,325 weekly downloads. As such, slippers-ui popularity was classified as popular.
We found that slippers-ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.