
Security News
Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.
@microsoft/decorators
Advanced tools
This package defines a conservative set of decorators intended for use in both NodeJS and web browser projects. We recognize that decorators have certain risks:
They can inject hidden code at runtime, causing confusion for developers who expected the source code to follow conventional semantics
They can be difficult to debug, since decorators are evaluated at load time (versus compile time or run time)
They can affect API contracts in subtle ways, which may cause unforeseen breaks for runtime versioning (e.g. when loading a subclass that was compiled against an older version of a base class with decorators)
The decorator spec is still evolving, and there may be breaking changes in the future
In this light, the @microsoft/decorators package provides a small set of decorators that stay within the conventional semantics of the TypeScript language. The intent is to document API contracts more clearly and catch common mistakes, NOT to provide an open-ended toolkit of creative macros. (If you are looking for that, there are many other options, for example the core-decorators project.)
This package is part of the SharePoint Framework, which is a collection of NPM packages that empower developers to create client-side experiences for Microsoft SharePoint. For more information, including complete API documentation and code samples, please visit the SharePoint Framework web site.
FAQs
A very conservative set of decorators for TypeScript projects
We found that @microsoft/decorators demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.

Security News
Ruby's creator Matz assumes control of RubyGems and Bundler repositories while former maintainers agree to step back and transfer all rights to end the dispute.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.