
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@3dsource/source-ui-native
Advanced tools
A design system foundation for 3D Source applications: standalone Angular components plus a self-contained SCSS style kit that works with any framework.
The library ships two things:
OnPush — ready to drop into any Angular project. npm i @3dsource/source-ui-native
Add the following import to your main styles file:
@use '../node_modules/@3dsource/source-ui-native/styles/source.ui.native.scss';
Import the desired component and add it to your component's imports:
import { ChangeDetectionStrategy, Component } from '@angular/core';
import { SourceButtonComponent } from '@3dsource/source-ui-native';
@Component({
selector: 'app-example',
imports: [SourceButtonComponent],
template: `<src-button weight="primary" size="md">Click Me</src-button>`,
changeDetection: ChangeDetectionStrategy.OnPush,
})
export class ExampleComponent {}
<src-button weight="primary" size="md">Click Me</src-button>
<src-badge context="info">Info</src-badge>
import { SourceLoadingComponent } from '@3dsource/source-ui-native';
<src-loading [size]="64" backgroundStrokeColor="#e0f8ee" progressStrokeColor="#007a5c" />
Components can be customized by overriding global CSS variables or by setting values for particular components variables. Whole table of CSS custom properties is available in the documentation site
:root {
--src-color-primary-500: #3f51b5;
--src-text-body-main: #fff;
}
.src-button {
--srcButtonBgColor: #3f51b5;
--srcButtonBorderRadius: 6px;
--srcButtonFontColor: #fff;
--srcButtonPaddings: 8px 16px;
}
You can see all available options and examples in documentation
FAQs
A bunch of native ui elements
We found that @3dsource/source-ui-native demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.