
Security News
Critical Security Vulnerability in React Server Components
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.
ngx-cms-common-app
Advanced tools
This library was built to develop and distribute common angular 2+ components. It also contains an example angular application that can be used to test existing and new components.
This library was built to develop and distribute common angular 2+ components. It also contains an example angular application that can be used to test existing and new components.
The repository follows the best practices defined by angular-cli. The root directory was generated using ng new ngx-cms-common-app to scaffold out a basic angular application. Within the application directory, ng g library ngx-cms-common was executed to generated the projects folder and supporting library configuration. All component development occurs in the project directory. Anything outside of project is strictly for the example application.
The library can be installed via npm with ngx-cms-common.
npm start will start up a local wiki served at http://localhost:5555
cms is the library prefix. This means that all component and directive names are by default generated with cms at the beginning. Using the Dropdown module as an example, cms-dropdown is the component selector and cmsDropdown is the the directive selector.
Checkout a feature branch from develop and make your changes
Open a PR to merge your feature branch into develop.
Once develop has enough changes to warrant a release, a release branch should be created by branching off of develop. (NOTE: Coordinate with the rest of the team to create an appropriate branch).
Once a release branch becomes available, a beta version should be published to npm so that consumers can test the potential release. How to publish a beta version
For fixes/changes that need to be made to a potential release, you should branch off of the release branch and open a PR to merge back into it. Anytime changes are made to a release branch, a new beta version should be published. How to publish a beta version
Once a beta release is ready to become a full version, open a PR to merge release into master.
Once the release has been merged into master, you can publish a new version: How to publish a version
In the release branch update projects/ngx-cms-common/package.json version with the appropriate beta version. All beta versions should have -beta.X appended to them. For example, for release/3.2.0 branch, the version should read 3.2.0-beta.0.
Once the version is update you can publish the beta version using:
cd /dist/ngx-cms-commonnpm publish --tag betaFor subsequent beta releases, the final number in the version should be incremented. For example, the next beta version after 3.2.0-beta.0 would be 3.2.0-beta.1.
In the master branch update projects/ngx-cms-common/package.json version with the appropriate version. For example 3.2.0-beta.0 would be updated to 3.2.0.
Once the version is update you can publish version using:
cd /dist/ngx-cms-commonnpm publishFAQs
This library was built to develop and distribute common angular 2+ components. It also contains an example angular application that can be used to test existing and new components.
We found that ngx-cms-common-app demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
React disclosed a CVSS 10.0 RCE in React Server Components and is advising users to upgrade affected packages and frameworks to patched versions now.

Research
/Security News
We spotted a wave of auto-generated “elf-*” npm packages published every two minutes from new accounts, with simple malware variants and early takedowns underway.

Research
/Security News
Malicious Rust crate evm-units disguised as an EVM version helper downloads and silently executes OS-specific payloads likely aimed at crypto theft.