Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
mofo-bootstrap
Advanced tools
Mozilla Foundation Bootstrap 4 theme.
For the moment it's recommended that you use one of two methods to include the compiled mofo-bootstrap CSS in your project:
package.json
for an npm-managed project by running npm install mofo-bootstrap --save
. You can then point your build system at the compiled CSS which resides at node_modules/mofo-bootstrap/dest/css/mofo-bootstrap.css
. This is the preferred method.http://mozilla.github.io/mofo-bootstrap/dest/css/mofo-bootstrap.css
from your HTML. This is not recommended for production, but is OK for prototyping or test purposes. Eventually we will put the CSS on a proper CDN.It's not currently advisable that you extend and compile the mofo-bootstrap SCSS in your project. SCSS doesn't (currently) allow for dynamic import paths, which complicates things when mofo-bootstrap becomes a module. We're working on a reasonable approach for allowing this...
Run the following commands in your terminal:
git clone https://github.com/mozilla/mofo-bootstrap.git && cd mofo-bootstrap
npm i
npm start
dest/ <- Contains compiled code. Don't edit anything in this folder!
src/
├── index.pug <- Template for demo page (Creates: dest/index.html)
└── scss/
├── custom/ <- SCSS modules for non-Bootstrap components.
├── overrides/ <- SCSS modules that override or extend Bootstrap components.
├── demo.scss <- SCSS specific to the demo page.
└── mofo-bootstrap.scss <- Primary entry point that defines all imports.
hyphenated-lowercase
_
)/src/scss/overrides/_type.scss
and bootstrap/scss/_type.scss
)To lint your Sass code, run npm run test:sass
Travis is connected to this task and your pull requests will fail if this test doesn't pass locally.
Deployment is run automatically after npm version
is invoked as part of the postversion
script.
The npm run deploy
command will deploy a demo page and compiled CSS for the library to the gh-pages
branch of the origin
remote. It will use the latest code on the master
branch of the origin
remote. It's not recommended to run it on its own, because doing so can result in the deployed demo and library not matching the latest published package in npm.
FAQs
Mozilla Foundation's Bootstrap 4 theme.
The npm package mofo-bootstrap receives a total of 11 weekly downloads. As such, mofo-bootstrap popularity was classified as not popular.
We found that mofo-bootstrap demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.