Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
edx-bootstrap
Advanced tools
This library provides Bootstrap 4
_ themes for use within Open edX. It
includes an Open edX theme as well as an edX-branded theme.
.. _Bootstrap 4: https://v4-alpha.getbootstrap.com/ .. _Open Sans typeface: https://fonts.google.com/specimen/Open+Sans
The edx-bootstrap library should be installed via npm:
npm install edx-bootstrap
Once installed, you can generate the sample pages
_:
make samples
For a full list of the available make targets, run:
make help
.. sample pages: https://github.com/edx/edx-bootstrap/blob/master/samples
To use an edX Bootstrap theme, import the _theme.scss
partial file from
your chosen theme into your own Sass. Note that this file must be loaded before
any Bootstrap partial files so that the theming will be applied.
See the sample Open edX SASS file
_ for a simple example.
.. _sample Open edX SASS file: https://github.com/edx/edx-bootstrap/blob/master/samples/open-edx/sass/sample.scss
The code in this repository is licensed under version 3 of the AGPL
unless otherwise noted. Please see the LICENSE
_ file for details.
.. _LICENSE: https://github.com/edx/edx-bootstrap/blob/master/LICENSE
Contributions are very welcome. Please read How To Contribute
_ for details.
Even though they were written with edx-platform
in mind, the guidelines
should be followed for Open edX code in general.
.. _How To Contribute: https://github.com/edx/edx-platform/blob/master/CONTRIBUTING.rst
Please do not report security issues in public. Please email security@edx.org.
Have a question about this repository, or about Open edX in general? Please
refer to this list of resources
_ if you need any assistance.
.. _list of resources: https://open.edx.org/getting-help
FAQs
The Bootstrap theme for Open edX
We found that edx-bootstrap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.