
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
core-layout
Advanced tools
A responsive AngularJS layout component for a simple, yet non-trivial, Web-app that works well on both small (mobile) and larger screens.
A responsive AngularJS layout component for a simple, yet not completely trivial, Web-app layout that works well on both small (mobile) and larger screens. An important feature is its use of iScroll 5.x, through angular-iscroll, to support fixed-position headers and footers without using the CSS position: fixed formatting instruction which is not well supported on older Android (<= 4.1.2 ?) and iOS (<= 8.x) versions.
Install the core-layout NPM package
# With NPM:
npm install --save core-layout
# With Yarn, which I prefer:
yarn add core-layout
Or, to check out a development version, start by cloning the repository, by
git clone git@github.com:mtr/core-layout.git
Then, install the necessary dependencies:
cd core-layout/
yarn install # Or: npm install
After that, you should have a dist directory with a subdirectory named lib:
dist/
├── lib
│ └── core-layout.js
└── scss
├── _core-drawers.scss
├── _core-modal.scss
├── _core-responsive.scss
├── _core.scss
└── _core-variables.scss
To rebuild the library, run
yarn build # Or `yarn watch` (to rebuild on every file change).
To build the examples, run
yarn build-examples # Or, `npm run-script build-examples`.
You may have a look at an Angular demo app that shows how you can use this core-layout module.
examples/)Please note that if you don't plan on changing the demo and testing new stuff, there's no need to compile it yourself; you can just visit the demo app.
FAQs
A responsive AngularJS layout component for a simple, yet non-trivial, Web-app that works well on both small (mobile) and larger screens.
We found that core-layout demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.