Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
github.com/alexkay/ui
Note to ALL users: please read and comment; the design of the package is fatally flawed but I want to know what people think of the fix.
Note to Mac users: there is a bug in Go 1.3 stable that causes cgo to crash trying to build this package. Please follow the linked bug report for detials.
Woah, lots of attention! Thanks!
26 June 2014
w.SetSpaced(true)
to opt in. Whether this will remain opt-in or whether the name will change is still unknown at this point.Layout()
which provides high-level layout creation. The function was written by boppreh and details can be found here. Whether this function will stay in the main package or be moved to a subpackage is still unknown.Checkbox.SetChecked()
to set the check state of a Checkbox programmatically.25 June 2014
Labels by default now align themselves relative to the control they are next to. There is a new function NewStandaloneLabel()
which returns a label whose text is aligned to the top-left corner of the alloted space regardless.
11 June 2014
I have decided to remove Mac OS X 10.6 support because it's only causing problems for building (and everyone else says I should anyway, including Mac developers!). This does break my original goal, but I'm going to have to break things sooner or later. Please let me know if any of you actually use this package on 10.6. (I personally don't like it when programs require 10.7 (or iOS 7, for that matter), but what are you gonna do?)
This is a placeholder README; the previous file (olddocs/oldREADME.md) was rather long and confusing. I'll be rewriting it properly soon.
Until then, here's the important things you need to know:
stable.md
for a list of what is guaranteed to not change at the API level — for everything newer, you have been warned!zconstants_windows_*.go
files; the other targets doandlabs/wakeup is a repository that provides a sample application.
If you are feeling adventurous, running ./test.sh
(which accepts go build
options) from within the package directory will build a test program which I use to make sure everything works. (I'm not sure how to do automated tests for a package like this, so go test
will say no tests found for now; sorry.) If you are cross-compiling to Windows, you will need to have a very specific Go setup which allows multiple cross-compilation setups in a single installation; this requires a CL which won't be in Go 1.3 but may appear in Go 1.4 if accepted and both windows/386 and windows/amd64 set up for cgo. (This is because ./test.sh
on Windows targets invariably regenerates the zconstants_windows_*.go
files; there is no option to turn it off lest I become complacent and use it myself.)
Finally, please send documentation suggestions! I'm taking the documentation of this package very seriously because I don't want to make anything ambiguous. (Trust me, ambiguity in API documentation was a pain when writing this...)
Thanks!
(Note: I temporarily disabled Travis.ci; if I can figure out how to do good cross-compiles with it, then I can put it back.)
You asked for them; here they are.
Image | Description |
---|---|
The test program on Windows 7 | |
The test program on Mac OS X 10.8 | |
The test program on Ubuntu 14.04 with KDE and the oxygen-gtk theme |
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.