
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
CSS library for easy use of CSS flexbox, based on Angular Material Layout
Flexlay is a CSS-only library to simplify common use cases regarding CSS Flexbox properties. Heavily inspired by Angular Material 1 Layout System, flexlay allows you to setup flexbox layouts through simple attributes in your HTML.
npm install flexlay --save
https://unpkg.com/flexlay@latest/dist/flexlay.min.css
The easiest way to use this library is to think in the layout model it provides (powered by flex of course), based on 3 core concepts:
fl-layout
)fl-layout-align
)fl-flex
)Thorough documentation will be available in the short future. Use the Material system as a temporary reference.
All attribute selectors have responsive support, initially following Material Design Breakpoints:
-<breakpoint name>
suffix to rules you only want targeting a specific screen size-gt-<breakpoint name>
suffix to rules you want targeting screen sizes greater than a specific breakpoint.Most work is laid out to support custom breakpoints but is yet to be finished. It needs enough support requests to be actually implemented.
Contributors are welcome! I started out this library out of need to use the Material Layout outside Angular 1, and I ended up using it in all my projects now. I want you to find the value it provides as I do, and contribute to make it better.
The project is sourced in SCSS and commented enough to understand how it works. Open a PR or Issue to help or ask how things work.
FAQs
CSS library for easy use of CSS flexbox, based on Angular Material Layout
The npm package flexlay receives a total of 0 weekly downloads. As such, flexlay popularity was classified as not popular.
We found that flexlay demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.