
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@coveo/create-atomic-component-project
Advanced tools
This is a starter project for building web components for Coveo Atomic using Stencil.
If you used npm init @coveo/atomic-component or npm init @coveo/atomic-result-component, your component should already be in src/components.
You can use either of these commands at the root of your project to add another component.
Visit Create a custom component for more information
You can test your component locally by adding it to src/pages/index.html.
The code of the component should already be included. You just need to add the component tag to the markup of the page.
There are two strategies we recommend for using custom components.
The first step for both these strategies is to publish to NPM.
You should run npm publish in the directory of the component or use the workspace flag to target it.
If you want your component to stay private, we recommend you publish it either to the official npm registry as a private package or to your own npm registry.
Visit Publish your custom component for publish instructions.
If you do not want your component to be listed on the Atomic Custom Component marketplace, change the keywords field in the package.json of your component before publishing.
<script type='module' src='https://unpkg.com/my-component@0.0.1/dist/my-component.esm.js'></script> in the head of your index.htmlYou cannot use
unpkgif your component is private.
Visit Use a published custom component for more information.
npm install my-component --save<script type='module' src='node_modules/my-component/dist/my-component.esm.js'></script> in the head of your index.htmlFAQs
Initialize a Coveo Atomic Library Project
The npm package @coveo/create-atomic-component-project receives a total of 6,949 weekly downloads. As such, @coveo/create-atomic-component-project popularity was classified as popular.
We found that @coveo/create-atomic-component-project demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.