Research
Security News
Malicious PyPI Package ‘pycord-self’ Targets Discord Developers with Token Theft and Backdoor Exploit
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
An interactive React.js CLI for building atomic components & utilities.
Conception | Installation | Usage | Contributing |
---|
Step 1 Create an issue to inform the maintainers and other contributors about what you're working on.
Step 2 Fork the repository, develop and test your code changes and add any relevant documentation. Ensure that your commit messages describe the changes.
Step 3 Make a pull request.
Scour the issues for an issue similar to what you'd be working on prior to starting a discussion. It's possible that someone else is already working on your idea, your approach is not quite right, or that the functionality exists already.
If not, click here to create a ticket for a feature request.
There is no style guide as of yet but attempt to keep your code as clean as possible and follow conventions already set out in the existing codebase.
Be sure to add the relevant tests before making the pull request, and ensure coverage hasn't suffered. Also update any documentation relvant to the changes you've made.
Once you have made all your changes, tests, and updated the documentation, make a pull request against the main branch of the repository. Be sure to reference the original issue in the pull request - with either Refs #400
or Closes #400
.
Scour the issues for an issue similar to what you'd be working on prior to starting a discussion. It is possible that someone else has already raised something about the bug/issue you've found.
If not click here to create a ticket to describe the bug you've found.
There is no style guide as of yet but attempt to keep your code as clean as possible and follow conventions already set out in the existing codebase. We recommend using Hemingway when writing/editing documentation.
See the CHANGELOG here.
Zishan Ali | Robert White |
FAQs
An interactive React.js CLI for building atomic components & utilities.
The npm package tyler receives a total of 7 weekly downloads. As such, tyler popularity was classified as not popular.
We found that tyler demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover the risks of a malicious Python package targeting Discord developers.
Security News
The UK is proposing a bold ban on ransomware payments by public entities to disrupt cybercrime, protect critical services, and lead global cybersecurity efforts.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.