Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@alvarium/document-signature
Advanced tools
This is a web component to display and sign documents.
To start a local version of the document-signature
component you need to execute the following commands:
npm install
npm start
This command should open a page in the browser with the url http://localhost:3000
This component can be deployed to any web page by adding the script and link tags to the HTML file, like so:
<!DOCTYPE html>
<html>
<head>
<meta charset="utf-8">
<title>Document Signature</title>
<link rel="stylesheet" href="document-signature.css">
</head>
<body>
<document-signature
endpoint="https://documents.gw2.alvarium.io"
alvariumEndpoint="https://alvdev.gw2.alvarium.io"
token="<API_TOKEN>"
locale="es"
documentTypeId="<DOCUMENT_TYPE_ID>"
entity="documentSignature"
contractUserSignatureId="874a02aa-c7a1-4054-b2fc-f85d1dad94e8"
>
</document-signature>
<script type="module" src="document-signature.js"></script>
</body>
</html>
Then simply add the component wherever you want as so:
<document-signature></document-signature>
endpoint
(string): The endpoint of the document service.alvariumEndpoint
(string): The endpoint of the Alvarium service.token
(string): The token for the document service.locale
(string): The language in which the document should be displayed.documentTypeId
(string): The id of the document type to display and sign.entity
(string, optional): The entity that is signing the document.contractUserSignatureId
(string): The id of the contract user signature.This project is licensed under the MIT License.
FAQs
This is a web component to display and sign documents.
The npm package @alvarium/document-signature receives a total of 11 weekly downloads. As such, @alvarium/document-signature popularity was classified as not popular.
We found that @alvarium/document-signature demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.