
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@refinitiv-ui/phrasebook
Advanced tools
Phrasebook is a collection of APIs to define translations. In addition, the package provides locales for all core Element Framework components. The phrasebook is primarily designed to be used with @refinitiv-ui/i18n and @refinitiv-ui/translate packages.
Phrasebook is a singleton that contains all translations. The developer can get a translation or observe translation changes.
All translations are defined per locale and scope. locale can be a top level locale (for instance en, ru, zn) or a region locale (for instance en-GB, uz-Cyrl-UZ). scope is usually an element name. If the scope is not defined, the translations are considered as default and are accessible for every scope.
To define a default locale:
Phrasebook.define('en', { OK: 'OK' });
Phrasebook.define('ru', { OK: 'Хорошо' });
To define a scoped locale:
Phrasebook.define('en', 'ef-element', { TEST_ELEMENT: 'Test Element' });
Phrasebook.define('ru', 'ef-element', {
TEST_ELEMENT: 'Элемент для тестирования'
});
You can get translations by calling get method. The response always includes scoped translations combined with default translations.
// Get scoped translations. Outputs: { OK: 'OK', TEST_ELEMENT: 'Test Element' }
console.log(Phrasebook.get('en', 'ef-element'));
// Get default translations. Outputs: { OK: 'OK' }
console.log(Phrasebook.get('en'));
console.log(Phrasebook.get('en', 'unknown-element'));
You can get the list of supported locales for the scope by calling supported method:
// Outputs: ['en', 'ru']
console.log(Phrasebook.supported('ef-element'));
// Outputs: []
console.log(Phrasebook.supported('unknown-element'));
The main benefit of using Phrasebook is the ability to observe changes in translations. As soon as the translation changes or the new translation defined the callback function is called. This allows dynamic loading of translations (e.g. from CDN).
To observer translations:
// Observe requires a unique key. Usually it is an HTML element, but can be any object, like Symbol
const element = document.createElement('ef-element');
Phrasebook.observe(element, 'ef-element', (locale) => {
console.log(locale);
});
// Outputs: 'en'.
Phrasebook.define('en', 'ef-element', { TEST_ELEMENT: 'Test Element' });
// Publishing default calls callback as well. Outputs: 'ru'.
Phrasebook.define('ru', { OK: 'Хорошо' });
To stop observing translation use disconnect method. This is usually required when the element is removed from DOM tree.
Phrasebook.disconnect(element);
The package is deployed with all translations required by Element Framework components.
Define locales inside src\locale. The following structure must be followed:
locale/
|--[locale]/
| |--[component-name].ts
| |--shared.ts
You must ensure that all keys are populated for every locale.
The key is the reference with which to return the translation value.
Each translation value is in the ICU format. A simpler formatting guide can be found at messageformat, or for an online checker: Translate ICU messages.
import { Phrasebook } from '../../';
import './shared';
const translations = {
KEY_TO_USE: 'Du hast {numPhotos, plural, =0 {keine Bilder.} =1 {ein Bild.} other {# Bilder.}}'
};
Phrasebook.define('de', 'emerald-color-dialog', translations);
export default translations;
FAQs
Collection of messages in EF components for translation
The npm package @refinitiv-ui/phrasebook receives a total of 74 weekly downloads. As such, @refinitiv-ui/phrasebook popularity was classified as not popular.
We found that @refinitiv-ui/phrasebook demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.