mirror of
https://github.com/Alfresco/alfresco-ng2-components.git
synced 2026-09-09 18:03:21 +00:00
c06e827d93202eb71e52adf96c32fdce223d9aee
[ACS-10100][Security] Remove npx usage from CI/CD and shell scripts to mitigate supply chain risks. [ACS-10117] Deprecate ADF Storybook and custom Docker builds (#11197)
Alfresco Application Development Framework (ADF)
Introduction
See the introduction page in our documentation for an overview of ADF along with links to useful starting points.
Prerequisites
Node: 18.x
NPM: 9.x
Also, check out the tutorial: Creating your first ADF Application for full details on what you may need to install before using ADF.
See also
Installation
npm install # or npm ci
This project has built-in supply chain attack protection. When you run npm install:
- Preinstall check scans both
package.jsonANDpackage-lock.jsonagainst OSV + GitHub Advisory databases - If malicious packages detected → installation blocked BEFORE any code runs
- Packages install normally
- Post-install check verifies installed packages (defense in depth)
- Only trusted packages (esbuild, nx, husky, etc.) get their native bindings rebuilt
Checking package.json catches new dependencies added during upgrades (e.g., nx migrate) before the lockfile is updated. If a malicious package is detected at any stage, installation is blocked.
Components
You can find the sources for all ADF components in the lib folder.
Libraries
ADF Libraries list:
Browser Support
All components are supported in the following browsers:
| Browser | Version |
|---|---|
| Chrome | Latest |
| Safari | Latest |
| Firefox | Latest |
| Edge | Latest |
Languages
TypeScript
91.9%
HTML
4.3%
SCSS
1.9%
JavaScript
1%
C
0.7%
Other
0.2%