
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@figma/widget-typings
Advanced tools
This repository contains the typings for the Figma Widget API.
Installation
Note that the widget api is an extention of the plugin api so you should install both @figma/plugin-typings
and @figma/widget-typings
npm i --save-dev @figma/plugin-typings @figma/widget-typings
Configure tsconfig.json
{
"compilerOptions": {
"typeRoots": [
"./node_modules/@types",
"./node_modules/@figma"
]
}
}
The configuration above is needed for the TypeScript compiler to use type definitions found in both ./node_modules/@types
and ./node_modules/@figma
. Normally, most external type definitions are from DefinitelyTyped and are installed in /@types
, which included by TypeScript by default. Since we host the plugin & widget typings separately, they are installed outside in /@figma
instead.
Types should become globally available without needing to use import statements. We do it this way because the widget API is part of the host environment, as opposed to being a package that a plugin includes.
Widget API releases have the format "Version X, Update Y". Equivalent tags are created in this repository as v<x>.<y>
. Note that not all API releases include API changes, some are just bug fixes. Therefore, some typings versions are skipped.
FAQs
Typings for the Figma Widget API
The npm package @figma/widget-typings receives a total of 10,091 weekly downloads. As such, @figma/widget-typings popularity was classified as popular.
We found that @figma/widget-typings demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 51 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.