
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
AngularTemplateTypeChecker is a command line tool that uses typescript to verify angularjs templates. You supply the names and types of the variables that the template uses, and attyc will find any bugs in your template.
Note: Attyc isn't intended to conclusively prove that a template is correct, AFAIK this is impossible in angularjs. Its goal is to give you a bit more confidence that the template is correct. If you want absolute confidence that your templates don't contain errors, upgrade to angular 2 and use the AOT compiler.
To install run npm install -g attyc. For help, run attyc --help.
Attyc needs some metadata about your template to work out the types of template variables. It expects there to be a comment at the very top of the template, containing an edn vector of maps containing the keys :name (variable name), :type (variable type) and optionally :import (path to import the type from). For example:
<!-- [{:name "ctrl" :type "Controller" :import "./controller"}] -->
Once you've added this metadata, run attyc [glob matching template files]
ng-init, ng-repeat and ng-options attributes, variable declaration is not allowed. For example, {{ x = 10 }} will cause an error.npm installlein figwheelnode dist/main.jsFor a production build, run lein cljsbuild once prod.
FAQs
Command line app to verify types in an angularjs template
We found that attyc demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.