
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
change-styleguide
Advanced tools
:warning: DEPRECATED - only update dependencies if needed
The style guide is a pattern library for Change.org apps. It is a set of design tools for the responsive, flexible, and efficient development of UI, as well as serving as a compass for consistency and intuitive experiences throughout the Change.org ecosystem. The goal is to eliminate the need for writing and maintaining CSS in the Change.org consumer apps.
To make use of the Change.org pattern library in your app:
npm install change-styleguide
The package includes the source LESS files as well as the compiled CSS, so you can make use of it in whole or in part. What you get:
Documentation on how to use the patterns can be found at http://styleguide.change.org/user-interface/ or when running this repo locally.
Please refer to the contribution guidelines for instructions on getting the style guide development environment set up. It also includes documentation on how to submit pull requests, our CSS code standards, and examples of all our CSS patterns.
This repository uses Prettier to enforce a uniform code style. A precommit
hook is setup to format the code once you run git commit
. If you have an error in your code (e.g. missing a closing }
), you will need to fix the error(s) and run git commit
again. You will see the following when an error occurs:
✖ prettier --write found some errors. Please fix them and try committing again.
FAQs
The Change.org style guide
The npm package change-styleguide receives a total of 13 weekly downloads. As such, change-styleguide popularity was classified as not popular.
We found that change-styleguide demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.