Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ember-cli-ted-bootstrap
Advanced tools
This addon is prepared for internal use by TED and is open-sourced for educational purposes but will not be supported for shared community use.
This addon adds the latest build of TED Bootstrap from S3 to your Ember app's bower.json
file, installs it, and imports the associated assets into your build.
This lets you independently update ted-bootstrap
by updating the bower.json
entry only. This is how other addons in the Ember ecosystem that rely on frontend assets work.
Refer to Bootstrap 3's docs for reference on how to use Bootstrap.
This is an OSS Ember addon, so install with
ember install ember-cli-ted-bootstrap
If you're upgrading from a pre-1.0 version, make sure to run
ember g ember-cli-ted-bootstrap
to get the associated bower entry added to your bower.json
.
Previous versions of ember-cli-ted-bootstrap
came with three components: <ted-navbar>
, <ted-flaps
, and <ted-panel>
.
<ted-navbar>
and <ted-flaps>
now belong to a separate addon, Ember CLI TED Navs.<ted-panel>
is deprecated in favor of Ember Collapsible Panel.These changes let us maintain and update the separate components more easily, and let developers update components independently, rather than needing to make sure everything in their app related to Bootstrap survives a large single upgrade.
FAQs
The default blueprint for ember-cli addons.
We found that ember-cli-ted-bootstrap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.