Security News
PyPI Introduces Digital Attestations to Strengthen Python Package Security
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
@nebular/security
Advanced tools
4.0.0 (2019-06-03)
Nebular 4.0 is a significant improvement and rework of the previous versions. We believe these changes bring Nebular to the new level of quality and feature-richness with:
@Input
's and @Output
's);To achieve all of this and allow Nebular to grow faster and better, we had to refactor a lot of internal implementations, as well as public APIs. We hope that next Nebular versions won't receive such significant upgrades and the amount of breaking changes will be kept as low as possible.
Migration Guide is available. We would appreciate hearing your feedback on the update steps, quality of the guide and if you have any questions or complications - please post a comment here https://github.com/akveo/nebular/issues/1524.
nb-icon
component, icons library, and @nebular/eva-icons package (#1319) (621f461)nb-icon
component, icons library, and @nebular/eva-icons package (#1319) (621f461)nb-radial-gradient
, nb-right-gradient
.disabled
status for cardgiant
size buttons and inputsnb-theme
function now throws an error if an unused variable is accessednb-install
function moved into @nebular/theme/styles/theming
nb-icon
instead of icon css classpublic_api.ts
now private so direct imports from @nebular/theme/*
will stop working.nb-icon
component and NbIconLibraries
service to host SVG and Font icon packs. As a breaking change, Nebular moves from nebular-icons
package to much more popular Eva Icons pack consisting of 480+ beautiful SVG icons. We believe this will bring more quality and variety to interfaces based on Nebular.Now all Nebular components internally use <nb-icon></nb-icon>
component utilizing Eva Icons SVG icons. More details on nb-icon component.
There are two ways to upgrade: Migrate to Eva Icons (recommended):
npm i @nebular/eva-icons
NbEvaIconsModule
in the app.module.ts
import { NbEvaIconsModule } from '@nebular/eva-icons';
@NgModule({
imports: [
// ...
NbEvaIconsModule,
],
})
Search for all usages of <span icon="nb-*"
or <i icon="nb-*"
and replace with <nb-icon icon="icon-name"></nb-icon>
. Full icons list https://akveo.github.io/eva-icons/.
Search for icon: 'nb-*'
references in properties for such components as Menu, Actions, Tabs, etc. Replace those with icon: 'icon-name'
. Please note, there is no need to specify any icon prefix (such as eva-
or nb-
) since prefix is specified when the icon package is registered in Nebular.
Update styles if necessary.
if you have nebular-icons
installed, remove the package and all references.
Continue using nebular-icons
This option is also possible, but please note, Nebular Component will still use Eva Icons pack for internal component icons, such as close
, arrow-down
, arrow-up
, etc.
app.component.ts
import { NbIconLibraries } from '@nebular/theme';
constructor(private iconLibraries: NbIconLibraries) {
this.iconLibraries.registerFontPack('nebular', { iconClassPrefix: 'nb' });
this.iconLibraries.setDefaultPack('nebular');
}
Search for all usages of <span icon="nb-*"
or <i icon="nb-*"
and replace with <nb-icon icon="icon-name"></nb-icon>
without the nb-
prefix since prefix is specified when the icon package is registered in Nebular.
Search for icon: 'nb-*'
references in properties for such components as Menu, Actions, Tabs, etc. Replace those with icon: 'icon-name'
without nb-
prefix since it is unnecessary and covered under the hood.
Please open an issue if you have any questions or having difficulties to migrate.
opacity
instead of lightning
calc
instead of round
and scss calculationsopacity
for placeholder instead of lightning
background-color
instead of the gradient in cosmic theme<a name="3.5.0"></a>
FAQs
@nebular/security
The npm package @nebular/security receives a total of 5,665 weekly downloads. As such, @nebular/security popularity was classified as popular.
We found that @nebular/security demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago.Ā It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PyPI now supports digital attestations, enhancing security and trust by allowing package maintainers to verify the authenticity of Python packages.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.