Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@figma/widget-typings
Advanced tools
This repository contains the typings for the Figma Widget API.
Installation
Note that the widget api is an extention of the plugin api so you should install both @figma/plugin-typings
and @figma/widget-typings
npm i --save-dev @figma/plugin-typings @figma/widget-typings
Configure tsconfig.json
{
"compilerOptions": {
"typeRoots": [
"./node_modules/@types",
"./node_modules/@figma"
]
}
}
The configuration above is needed for the TypeScript compiler to use type definitions found in both ./node_modules/@types
and ./node_modules/@figma
. Normally, most external type definitions are from DefinitelyTyped and are installed in /@types
, which included by TypeScript by default. Since we host the plugin & widget typings separately, they are installed outside in /@figma
instead.
Types should become globally available without needing to use import statements. We do it this way because the widget API is part of the host environment, as opposed to being a package that a plugin includes.
Widget API releases have the format "Version X, Update Y". Equivalent tags are created in this repository as v<x>.<y>
. Note that not all API releases include API changes, some are just bug fixes. Therefore, some typings versions are skipped.
FAQs
Typings for the Figma Widget API
The npm package @figma/widget-typings receives a total of 4,097 weekly downloads. As such, @figma/widget-typings popularity was classified as popular.
We found that @figma/widget-typings demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 47 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.