Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@boardroom/protocol-info
Advanced tools
Project information which will be served to display on the Boardroom Governance Portal.
This public repo contains project information which will be served to display on the Boardroom Governance Portal
Browse the Portal »
Landing
·
Discord
·
Get In Touch
index.ts
file contains basic project metadata, as well as branding colorsoverview.md
contains a project's governance overview. This content is displayed in each project's 'Overview' tab, below its statistics.logo.png
is a logo file displayed in various places accross the app, including protocol switcher.header.png
is a logo file is displayed at the top of sidebar when that project is selected in the navigation.calls
is a folder collects governance and community call agendas and meeting notes, displayed in each project's 'Calls' tab.Basic information of the protocol is saved in protocols object of index.ts file
protocol_key: {
name: "Protocol Name",
path: "Path used in boardroom url",
description: "Description of protocol",
suffix: "Token",
folder: "Folder name to host resources",
},
Edit the corresponding value in the object and raise a new PR for changes.
protocolBranding
of index.ts if it does not exist.unique_protocol_key: {
"--background-primary-nav": "#001529", // Background color for sidebar, header and header information in protocol pages
"--color-text-nav": "#e7e8eb", // Color of text in sidebar, header and header information in protocol pages
"--background-switcher-active": "#000000", // Background color of the active nav element in sidebar
},
We have a codesandbox instance https://codesandbox.io/s/boardroombranding-q3u9z to visualize branding changes. Change the corresponding color variable in index.js file to have a sense of how the protocol pages will look after the updates
Content files will be sorted by date. Add the date (dd-mm-yy) to the file name you are creating. This date will be hidden on the Boardroom portal but will sort the files by most recent.
New content folders will dynamically display a new item under the 'Resources' tab. Raise a new PR by following the steps below:
events.json
file of the protocol using the following format:[
{
"title": "This is an example event.",
"url": "https://example.com",
"date": "2021-01-08T00:00:00.000Z"
},
{
"title": "This is another example event.",
"url": "https://example.com",
"date": "2021-01-10T00:00:00.000Z"
}
]
Please keep in mind that the Boardroom team will need to add your project before it displays on the portal. Raise a new PR by following the steps below:
protocol_key: {
name: "Protocol Name",
path: "Path used in boardroom url",
description: "Description of protocol",
suffix: "Token",
folder: "Folder name to host resources",
},
logo.png
in the folder with an aspect ratio of 1:1. This will display in the project switcher and various other places in the app.header.png
which will display at the top sidebar. Ideal dimensions are 400 × 150 (W× H)calls
which will contain meeting note files.Please reach out in Discord with any questions!
FAQs
Project information which will be served to display on the Boardroom Governance Portal.
The npm package @boardroom/protocol-info receives a total of 42 weekly downloads. As such, @boardroom/protocol-info popularity was classified as not popular.
We found that @boardroom/protocol-info demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.