
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
@seatgeek/backstage-plugin-awards
Advanced tools
This plugin offers a management system for awards that can be created and given to recipients in your Backstage deployment, and then displayed onto their Entity profile pages.
This plugin offers a management system for awards that can be created and given to recipients in your Backstage deployment, and then displayed onto their Entity profile pages.
The plugin offers a set of Page Components and an Information card to achieve
this. It also requires the installation of its dependency
@seatgeek/backstage-plugin-awards-backend
.
Both the backend and the frontend rely on Backstage authentication in order to enforce ownership of awards. Please follow the documentation to enable authentication before attempting to use this plugin!
Install the @seatgeek/backstage-plugin-awards
package in your frontend app package:
# From your Backstage root directory
yarn add --cwd packages/app @seatgeek/backstage-plugin-awards
Open the file packages/app/src/App.tsx
in your Backstage deployment and add
the following lines:
// other imports
import { AwardsPage } from '@seatgeek/backstage-plugin-awards';
// Add the routes for the plugin pages before the <FlatRoutes> block is closed.
<FlatRoutes>
// Many routes
<Route path="/awards" element={<AwardsPage />} />
</FlatRoutes>;
// Rest of the file
Inside the file packages/app/src/components/catalog/EntityPage.tsx
file in
your Backstage deployment, add the following items:
import { UserAwardsCard } from '@seatgeek/backstage-plugin-awards';
// Look for the const userPage and add the card to the Grid
const userPage = (
<EntityLayout>
<EntityLayout.Route path="/" title="Overview">
<Grid container spacing={3}>
{entityWarningContent}
<Grid item xs={12} md={6}>
<EntityUserProfileCard variant="gridItem" />
</Grid>
<Grid item xs={12} md={6}>
<EntityOwnershipCard
variant="gridItem"
entityFilterKind={OWNERSHIP_KINDS}
/>
</Grid>
{/* Add this here - BEGIN */}
<Grid item xs={12} md={6}>
<UserAwardsCard />
</Grid>
{/* Add this here - END */}
</Grid>
</EntityLayout.Route>
</EntityLayout>
);
In the file packages/app/src/components/Root/Root.tsx
in your Backstage
deployment, add the following code:
// Many imports
import EmojiEventsIcon from '@material-ui/icons/EmojiEvents';
export const Root = ({ children }: PropsWithChildren<{}>) => (
<SidebarPage>
<NewAnnouncementBanner max={3} />
<Sidebar>
<SidebarLogo />
<SidebarSearch />
<SidebarDivider />
<SidebarGroup label="Menu" icon={<MenuIcon />}>
{/* Global nav, not org-specific */}
<SidebarItem icon={HomeIcon} to="catalog" text="Home" />
<SidebarItem icon={ExtensionIcon} to="api-docs" text="APIs" />
<SidebarItem icon={LibraryBooks} to="docs" text="Docs" />
<SidebarItem icon={CreateComponentIcon} to="create" text="Create" />
<SidebarItem icon={DoneAllIcon} to="soundcheck" text="Soundcheck" />
<SidebarItem icon={AnnouncementIcon} to="/announcements" text="Announcements" />
{/* End global nav */}
{/* Add this here - BEGIN */}
<SidebarItem icon={EmojiEventsIcon} to="awards" text="Awards" />
<SidebarDivider />
{/* Add this here - END */}
{/* Other imports... */}
Your plugin has been added to the example app in this repository, meaning you'll be able to access it by running yarn start
in the root directory, and then navigating to /awards.
You can also serve the plugin in isolation by running yarn start
in the plugin directory.
This method of serving the plugin provides quicker iteration speed and a faster startup and hot reloads.
It is only meant for local development, and the setup for it can be found inside the /dev directory.
FAQs
This plugin offers a management system for awards that can be created and given to recipients in your Backstage deployment, and then displayed onto their Entity profile pages.
The npm package @seatgeek/backstage-plugin-awards receives a total of 1 weekly downloads. As such, @seatgeek/backstage-plugin-awards popularity was classified as not popular.
We found that @seatgeek/backstage-plugin-awards demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.