Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
ng-barrel is a small CLI tool, that takes the output of ng generate
commands
and adds the new service / component / ... to the closest index.ts
file.
└───src
├───app
│ └───foo
│ └───components
| └───index.ts
...
$ ng generate component foo/components/example Example | ng-barrel
Angular:
CREATE src/app/foo/components/example/example.component.html (26 bytes)
CREATE src/app/foo/components/example/example.component.spec.ts (635 bytes)
CREATE src/app/foo/components/example/example.component.ts (273 bytes)
CREATE src/app/foo/components/example/example.component.css (0 bytes)
UPDATE src/app/app.module.ts (4077 bytes)
NgBarrel:
export * from './example/example.component'; >> src/app/foo/components/index.ts
└───src
├───app
│ └───foo
│ └───components
│ │ index.ts
│ └───example
│ example.component.css
│ example.component.html
│ example.component.spec.ts
│ example.component.ts
...
export * from './example/example.component';
ng-barrel takes the CLI output and searches for newly created .ts
files (excluding .spec.ts
)
and adds all their exports to the closest barrel.
To find the closest barrel the tools starts from the newly created file and traverses upwards. The first barrel file will be used.
By default it searches for index.ts
. You can change this behaviour via --barrel / -b
.
With this option you can use it for Angular libraries as well:
ng g s services/foo Foo --project=my-lib | ng-barrel --barrel public_api.ts
You can also pass --create / -c
to specify where a barrel file should be created.
If this option is specified it takes priority over tree traversing.
If a barrel file at the specified path already exists, the export will be appended. Otherwise a new file will be written.
--create
takes a relative path, which will be combined with the path of the newly added files.
$ ng g s foo/services/Data data | ng-barrel -c ./
Angular:
CREATE src/app/foo/services/data.service.spec.ts (323 bytes)
CREATE src/app/foo/services/data.service.ts (133 bytes)
NgBarrel:
export * from './data.service'; >> src\app\foo\services\index.ts (NEW)
└───src
├───app
│ └───foo
│ ├───components
│ │ └─── ...
│ └───services
│ data.service.spec.ts
│ data.service.ts
│ index.ts
...
FAQs
CLI tool to add generated Angular files to barrel files
The npm package ng-barrel receives a total of 3 weekly downloads. As such, ng-barrel popularity was classified as not popular.
We found that ng-barrel demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.