
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
carbon-components-angular
Advanced tools
An Angular implementation of the Carbon Design System
Assuming we're starting with a new @angular/cli project:
$ npx @angular/cli new my-project --style=scss
$ cd my-project
$ npm i --save carbon-components-angular @carbon/styles
Then we need to include carbon-components in src/styles.scss
:
@use "@carbon/styles";
Note: For offline usage we'll need to set
$font-path: '~carbon-components/src/globals/fonts';
at the very top of oursrc/styles.scss
. This will copy the fonts to ourdist
folder upon successful build. If you like the fonts to be a part of yourassets
folder and not pollute thedist
folder then copy the fonts fromnode_modules/carbon-components/src/globals/fonts
into our app'ssrc/assets/fonts
folder and add$font-path: '/assets/fonts/';
at the very top of oursrc/styles.scss
.
That's it! Now we can run npm start
and start building out our application!
Note: This isn't the only way to bootstrap a
carbon-components-angular
application, but the combination of@angular/cli
and thecarbon-components
scss is our recommended setup.
Angular version support matrix:
Angular | v3 | v4 | v5 |
---|---|---|---|
6 | ✅ | ❌ | ❌ |
7 | ✅ | ✅ | ❌ |
8 | ✅ | ✅ | ❌ |
9 | ❌ | ✅ | ❌ |
10 | ❌ | ✅ | ❌ |
11 | ❌ | ✅ | ❌ |
12 | ❌ | ✅ | ❌ |
13 | ❌ | ✅ | ❌ |
14 | ❌ | ✅ | ✅ |
15 | ❌ | ✅ | ✅ |
16 | ❌ | ❌ | ✅ |
17 | ❌ | ❌ | ✅ |
18 | ❌ | ❌ | ✅ |
Carbon Components Angular version support matrix:
Carbon Components Angular version | Community support | Active support |
---|---|---|
v1 | ❌ | ❌ |
v2 | ❌ | ❌ |
v3 | ✅ | ❌ |
v4 | ✅ | ✅ |
v5 | ✅ | ✅ |
Not supported versions: Out of support. We plan to support our latest, and previous release. Beyond that we make no guarantees of continued support - these include v1, v2
How to read this table:
If you are an IBMer, you must complete the steps at W3 Developer before contributing to any open source projects. See our contributing guidelines for more details.
npm install
to grab all the dependencies, then npm run storybook
to start storybooksrc
index.ts
npm test
and npm run lint
to make sure the tests and linter passTo keep our build dependencies local we use npm scripts to run our webpack, gulp, and general build tasks. You should never install webpack or gulp globally as that will likely conflict with our version. You should never need to modify the build process to add a component or story.
npm run storybook
to run storybook (port 6006)npm run build
to generate the distdocs:build
to build documentationdocs:server
to build and run the documentation servernpm run lint
to run tslintnpm test
to run testsRead our code of conduct here
This package uses IBM Telemetry to collect de-identified and anonymized metrics data. By installing this package as a dependency you are agreeing to telemetry collection. To opt out, see Opting out of IBM Telemetry data collection. For more information on the data being collected, please see the IBM Telemetry documentation.
FAQs
Next generation components
The npm package carbon-components-angular receives a total of 11,419 weekly downloads. As such, carbon-components-angular popularity was classified as popular.
We found that carbon-components-angular demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.