
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@midcamp/hatter
Advanced tools
Pattern Lab version of The Hatter style-guide for MidCamp.org
Prerequisite: NodeJS - https://nodejs.org/en/
Install dependencies:
npm install
Run Pattern Lab in watch mode (watches for changes in patterns and scss):
npm start
Pattern Lab can then be viewed at http://127.0.0.1:3000
The bulk of the code lives in the appropriately named source directory. Within sourcethe _patterns directory
contains the elements, components, and templates that make up this style guide.
source/scss contains the main scss file for the project (styles.scss) and any scss partials not directly related to
patterns in the system. Long term, most of the remaining partials in source/scss/components should be moved alongside
a related pattern in _patterns
Image and svg assets are contained in source/imgs and source/svg respectively.
Compiled assets land in the dist directory. At the moment this is ignored by version control. Depending on the build
process for the theme that uses this as a dependency, we may want to change that.
If for example we wanted to make adjustments to the news teaser component, we'd edit the source files in
source/_patterns/01-components/news-teaser
_c-news-teaser.scss is a sass partial containing styles related to this component. The leading c- is namespacing to
indicate that is a component.
c-news-teaser.md is a markdown file containing documentation for the component.
c-news-teaser.twig contains markup for the component.
To create a new pattern, create a new subdirectory in the appropriate top level pattern directory (01-components for example.)
A pattern must at least have a pattern-name.twig file containing markup for the pattern.
The following optional files can also be included:
pattern-name.md - Documentation for the pattern
_pattern-name.scss - sass partial for the pattern (it should automatically be detected when compining the main sass file.)
pattern-name.(yml/json) - Data for the pattern
npm start - launch Pattern Lab and Webpack in watch mode.npm run watch - run Webpack in watch modenpm run dist - build pattern library assets in producion modenpm run pl:serve - run Pattern Lab in development modenpm run pl:build - build static version of pattern library.npm run pl:deploy - build static version of pattern library and deploys to GitHub Pages.https://patternlab.io/docs/index.html
FAQs
The Hatter style-guide for MidCamp.org
We found that @midcamp/hatter demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.