
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@cmsgov/qpp-style-angular
Advanced tools
When creating components that work with native elements directly (example buttons) opt for extending the native API for the element rather than encapsulating it. We try to take as much inspiration from https://material.angular.io/ for example. The developer experience is enriched and guided rather than limited when you allow full access to a native element rather than a limited API via component inputs. This means tending towards using directives, or components with attribute selectors and content projection rather than traditional components. Not all components in this library currently follow this pattern, but we will be working towards this goal!
Whenever possible, use OnPush change detection for a more performant and reactive UI.
cd /angular
npm ci
cd /shared
npm ci
cd /angular
npm run test:lib:watch
cd /angular
npm run test:lib
cd /angular
npm run start
cd qpp-style/angular
npm run build:lib
cd qpp-style/angular/dist/qpp-style-angular
npm link
npm link @cmsgov/qpp-style-angular
Some components in this library are built upon the angular material library components, such as the CMSModalModule and CMSIconsModule. Therefore, @angular/material and @angular/cdk are required dependencies prior to installing the @cmsgov/qpp-style-angular package.
In order to fully utilize the icons in the CMSIconsModule in this library, the application must include the following configuration in the angular.json build options so that the assets get compiled into the application's build option assets:
// angular.json
{
//...
build: {
//...
options: {
//...
assets: [
{
glob: '**/*',
input: 'node_modules/@cmsgov/qpp-style-angular/assets',
output: 'assets/svg',
},
],
},
},
}
FAQs
## Coding Standards
The npm package @cmsgov/qpp-style-angular receives a total of 79 weekly downloads. As such, @cmsgov/qpp-style-angular popularity was classified as not popular.
We found that @cmsgov/qpp-style-angular demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 52 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.