
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
taxfix-components
Advanced tools
Repository for Italy/Spain UI components
├── components
│ ├── dataEntry // Inputs checkboxes, radio buttons, text fields, etc.
│ ├── feedback // Alerts and Loadings
│ ├── general // General UI componets
│ │ ├── Button
│ │ ├── Icon
│ │ ├── IconButton
│ │ ├── Image
│ │ └── text
│ ├── layout // Layout especific components
│ │ ├── Container
│ │ ├── Grid
│ │ └── Pages
│ ├── navigation
│ └── other // Misc
├── index.ts //
└── theme
├── ThemeProvider.tsx
├── colors.ts
├── font.ts
├── index.tsx
└── raw-colors.ts
yarn install
ios/
folder and run pod install
Go to the project folder and run yarn sb:ios
Go to the project folder and run yarn sb:android
Go to the project folder and run yarn sb:web
https://user-images.githubusercontent.com/7741167/142962498-ff7b42bc-ff84-479b-8cb9-0be5293f120f.mov
Using the comand line run yarn generate
this will prompt you to enter the component name and the component type.
this command will create a new component folder and a new component file, and will also create a storybook for the component.
to create a new version of the library, run yarn prepare
this will create a new version of the library in the dist
folder.
After this you can upload the new version to the dist
folder to the github repository or npm registry.
to test the library locally, first we need to build the project. After, link the library to the project folder with:
yarn link
than in the consumer project, run:
yarn link "@taxfix/taxfix-components"
Also, in the consumer project is needed to install styled-components
and native-base
.
In order to avoid problems related to double import of dependencies, the following webpack alias should be included in the webpack.config file of the consumer project:
config.resolve.alias = {
//...
'styled-components': path.resolve('node_modules/styled-components'),
'native-base': path.resolve('node_modules/native-base'),
react: path.resolve('node_modules/react'),
//...
this will make sure that these packages are available in the consumer project as a singleton.
Once the project is linked and the webpack alias included, you can import the library normaly like any other import:
import { Button } from '@taxfix/taxfix-components';
const App = () => {
<Button variant="primary">Hello World</Button>;
};
Please, note that you would need to include the ThemeProvider
of your project in order to add the theme values to the new components created in the consumer:
import { Collapsable, Child, ItalyThemeProvider } from '@taxfix/taxfix-components';
export const NewComponentInConsumer: React.FC<NewComponentProps> = ({ childVariant }) => {
return (
<ItalyThemeProvider>
<Collapsable title="2022 Taxes" minHeight="80px" maxWidth="580px" startOpen>
<Child variant={childVariant} />
</Collapsable>
</ItalyThemeProvider>
);
};
Happy coding!
FAQs
Repository for Italy/Spain UI components
We found that taxfix-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.