
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@momentum-design/widgets
Advanced tools
A pure library based on web components and chart.js that is for building dashboards which can be used in any front-end framework.
All examples in website are using the JSX and online code editor to render widgets in real time.
The UMD build is also available on unpkg.com:
<link rel="stylesheet" href="https://unpkg.com/@momentum-design/widgets/dist/widgets.css" />
<script src="https://unpkg.com/@momentum-design/widgets/dist/widgets.umd.js"></script>
Then you can find the library on window.mdw.
NPM is the easiest and fastest way to get started using this library. It is also the recommended installation method when building single-page applications (SPAs). It pairs nicely with a CommonJS module bundler such as Webpack.
# latest stable
$ npm i @momentum-design/widgets
Import library and enable web component support in src/app/app.module.ts.
import { CUSTOM_ELEMENTS_SCHEMA, NgModule } from '@angular/core';
import { BrowserModule } from '@angular/platform-browser';
+import '@momentum-design/widgets';
import { AppComponent } from './app.component';
@NgModule({
declarations: [
AppComponent,
],
imports: [
BrowserModule
],
providers: [],
bootstrap: [AppComponent],
+ schemas: [CUSTOM_ELEMENTS_SCHEMA]
})
export class AppModule { }
Use the components in your HTML template.
<mdw-chart
type="pie"
data='{
"Alabama": 13,
"Colorado": 17,
"Arizona": 8,
"Vermont": 10,
"South Carolina": 40
}'
></mdw-chart>
Clone this repo.
Install all dependencies via run command npm run init.
Now, run npm start to start your work.
The component code should be placed to src/components. The new component should be structured as below:
new-component
├─ index.ts // should export all public members
├─ new-component.ts // the component code
├─ new-component.spec.ts // unit tests
├─ new-component.types.ts // all types definitions
└─ new-component.plugins.ts // plugins of chart.js if need
The style file should be placed with component code and imported in src/styles/main.scss.
Also export the new component in src/components/index.ts file.
The internal folder dependency should be as below. That means we should not import anything from core folder into types folder or components into core folder.
components ─⫸ core ─⫸ types
Commit your changes and push them to your forked repo, and submit a Pull Request to main branch.
PascalCase for type names.I as a prefix for interface names.PascalCase for enum values.camelCase for function names.camelCase for property names and local variables._ as a prefix for private properties.CONSTANT_CASE for the constants that is immutable.All commit message MUST follow Angular Commit Message Format.
Format as:
<type>(<scope>): <short summary>
│ │ │
│ │ └─⫸ Summary in present tense. Not capitalized. No period at the end.
│ │
│ └─⫸ Commit Scope: <component-name>
│
└─⫸ Commit Type: build|ci|docs|feat|fix|perf|refactor|test
The <type> and <summary> fields are mandatory, the (<scope>) field is optional.
npm run data will print the random data which is predefined in ./tools/data.ts and can be used to test your component. For example, npm run data -- --pie --default --5, npm run data -- --number --10 to get 10 random numbers.FAQs
widgets based on Chart.js for building dashboards
The npm package @momentum-design/widgets receives a total of 2 weekly downloads. As such, @momentum-design/widgets popularity was classified as not popular.
We found that @momentum-design/widgets demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.