
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@forgerock/ui-design
Advanced tools
The ForgeRock UI Design package is a CSS library built on top of Bootstrap. All existing Bootstrap styles and class names are unchanged, and this library should be used as if it were the original Bootstrap library.
$ npm install @forgerock/ui-design
The main forgerock.css file is located in the lib/ folder along with a CSS sourcemap and
TypeScript type definitions file
forgerock.css
forgerock.css.map
forgerock.css.d.ts
The spritesheet SVG file will be located in src/scss/sprites and will have a css-busting unqiue filename with
each build.
sprite-#####.svg
Running this script will automatically build the complete SCSS library. The build process includes
linting, building spritesheet, and creating type definitions. Compiled files are located in the
lib folder.
$ npm run build
Running this script will build the complete SCSS library, or individual components depending on
passed arguments. Arguments are passed to an npm script via the -- delimeter. Compiled CSS files
are located in the dist folder.
Outputted filename will be forgerock.css
$ npm run build:sass
Outputted filename will be component1-component2-etc.css ex: alert-badge-card.css
$ npm run build:sass -- alert badge card
To update the sprite library, add your svg to the src/svg/ folder and run the below script. This
will render a new PNG spritesheet in the src/svg/sprites/ folder, and the SASS file
src/scss/_sprite.scss.
$ npm run build:sprites
Running this script will build type definitions for the main CSS file located in the lib folder.
$ npm run build:types
FAQs
ForgeRock Styles and Styleguide
We found that @forgerock/ui-design demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.