
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@forgerock/ui-design
Advanced tools
The ForgeRock UI Design package is a CSS library built on top of Bootstrap. All existing Bootstrap styles and class names are unchanged, and this library should be used as if it were the original Bootstrap library.
$ npm install @forgerock/ui-design
The main forgerock.css
file is located in the lib/
folder along with a CSS sourcemap and
TypeScript type definitions file
forgerock.css
forgerock.css.map
forgerock.css.d.ts
The spritesheet SVG file will be located in src/scss/sprites
and will have a css-busting unqiue filename with
each build.
sprite-#####.svg
Running this script will automatically build the complete SCSS library. The build process includes
linting, building spritesheet, and creating type definitions. Compiled files are located in the
lib
folder.
$ npm run build
Running this script will build the complete SCSS library, or individual components depending on
passed arguments. Arguments are passed to an npm script via the --
delimeter. Compiled CSS files
are located in the dist
folder.
Outputted filename will be forgerock.css
$ npm run build:sass
Outputted filename will be component1-component2-etc.css
ex: alert-badge-card.css
$ npm run build:sass -- alert badge card
To update the sprite library, add your svg to the src/svg/
folder and run the below script. This
will render a new PNG spritesheet in the src/svg/sprites/
folder, and the SASS file
src/scss/_sprite.scss
.
$ npm run build:sprites
Running this script will build type definitions for the main CSS file located in the lib
folder.
$ npm run build:types
FAQs
ForgeRock Styles and Styleguide
The npm package @forgerock/ui-design receives a total of 2 weekly downloads. As such, @forgerock/ui-design popularity was classified as not popular.
We found that @forgerock/ui-design demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.