
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
ngx-unused
Advanced tools
Detect unused classes (components, pipes, services and directives) defined in Angular workspace.
Find declared but unused Angular classes in your codebase.
This tool recognizes components, directives, pipes and services in Angular code and checks if they are used in provided project.
Simplest way to use is via npx:
npx ngx-unused <source-root> -p <tsconfig-path>
ngx-unused - find unused classes in Angular codebase
Usage: ngx-unused <directory> [-p | --project] <tsconfig-file>
<directory> - directory to be scanned
to scan multiple directories pass names separated by space
(usages of classes from source roots will be also searched in source roots)
<tsconfig-file> - main tsconfig file
should be one containing @paths definitions
for NX projects its usually tsconfig.base.json
Options:
-p | --project <tsconfigfile> - tsconfig file path (required)
-h | --help - print this help
Source root directories and tsconfig file must be under the same root directory.
Examples:
ngx-unused . -p tsconfig.base.json
ngx-unused libs apps/my-app -p tsconfig.base.json
Code from provided source root directory (or directories) is analyzed to find relevant classes.
Relevant class is class with on of following Angular decorators: @Component
,@Directory
,@Pipe
,@Injectable
.
Each class is checked for relevant usages in codebase. When it has no relevant usages it is
considered unused.
Class decorated with one of Angular decorators
@Component
@Directive
@Pipe
@Injectable
Classes declared in ignored files will be ignored.
Relevant usage is any usage that is not one of following:
@NgModule
decorator (in imports
,exports
, declarations
, providers
properties)useClass
and useExisting
in provider objectFiles matching *.spec.ts
glob will be ignored.
Future version may have option to configure that.
Output is printed to standard output. If process.stdout.isTTY
is false no decorative texts and no progress will be
printed, so it can be safely piped.
Output contains progress information and formatted results. Formatted results is a list of unused classes, grouped by files.
0
No unused classes detected.
1
Detected unused component, directive, pipe, or service.
2
: Invalid configuration
FAQs
Detect unused classes (components, pipes, services and directives) defined in Angular workspace.
The npm package ngx-unused receives a total of 1,059 weekly downloads. As such, ngx-unused popularity was classified as popular.
We found that ngx-unused demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.