Add Graph component (#12)

.gitignore

@@ -2,6 +2,7 @@
 
 webviz_core_components/**/*
 !webviz_core_components/__init__.py
+!webviz_core_components/graph.py
 DESCRIPTION
 NAMESPACE
 R/

MANIFEST.in

@@ -1,5 +1,6 @@
 include webviz_core_components/webviz_core_components.min.js
 include webviz_core_components/webviz_core_components.dev.js
+include webviz_core_components/plotly-cartesian.js
 include webviz_core_components/metadata.json
 include webviz_core_components/package-info.json
 include README.md

README.md

@@ -13,6 +13,19 @@ You can quickly get started with:
 2.  Run `python usage.py`
 3.  Visit http://localhost:8050 in your web browser
 
+> :warning: The components here are used by [`webviz-config`](https://github.com/equinor/webviz-config).
+In order to facilitate a strong [CSP configuration](https://developer.mozilla.org/en-US/docs/Web/HTTP/CSP),
+this package has a side effect of changing the Plotly distribution coming with
+[`dash-core-components`](https://github.com/plotly/dash-core-components) to one
+that do not rely on [`eval()`](https://developer.chrome.com/extensions/contentSecurityPolicy#relaxing-eval).
+More specifically it changes from `plotly-full` to `plotly-cartesian` bundle. This will be
+necessary in order to enforce a strong CSP configuration as long as
+[this `plotly` issue](https://github.com/plotly/plotly.js/issues/897) and
+[this `dash-core-components` issue](https://github.com/plotly/dash-core-components/issues/462)
+both are open. Note that this side-effect only takes place if `dash-core-components`
+is installed, which is a requirement if the `Graph` component from this repository
+is going to be used.
+
 ## Contributing
 
 This project was generated by the