Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@a-la/bulma
Advanced tools
@a-la/bulma
is Bulma Class Properties And Types Definitions For JSX.
yarn add -D @a-la/bulma
npm i --save-dev @a-la/bulma
By installing this package, you will be able to specify classes on tags and components as JSX properties when using alamode
transpiler.
To receive access to auto-completions, you'll need to import the @a-la/bulma
package in your source code:
import '@a-la/bulma'
// or when using Preact 8:
import '@a-la/bulma/preact'
export const Component =
() => (<div modal>Hello World</div>)
The actual import doesn't do anything as the source file is blank. It is needed only for VSCode to pick up distributed typings.
Because of a bug in VSCode, you won't see properties with hyphens, e.g., is-loading
and will only see isLoading
, but you can actually use both. The camel cases are added for discoverability of classes.
See the 📙 full list of Bulma classes in Wiki.
An annotated version of Bulma 0.8.0 is available in bulma/bulma.css
where /* @alternate */
annotations were added for compatibility with Closure Stylesheets.
GNU Affero General Public License v3.0
© Art Deco™ for À La Mode 2020 |
---|
FAQs
Bulma Class Properties And Types Definitions For JSX.
The npm package @a-la/bulma receives a total of 3 weekly downloads. As such, @a-la/bulma popularity was classified as not popular.
We found that @a-la/bulma demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.