
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@acta/rollup-plugin-postcss
Advanced tools
A rollup plugin to import transpiled styles files as modules width PostCSS.
A rollup plugin to import transpiled styles files as modules with PostCSS.
Install with npm i -D @acta/rollup-plugin-postcss
. Then in your config file:
...
import postCSS from '@acta/rollup-plugin-postcss';
...
...
plugins: [
...
postCSS({
minified: true,
includes: ['.sass', '.scss'],
excludes: ['node_modules'],
presetEnv: {
stage: 2,
features: [],
browsers: 'defaults',
}
}),
...
],
...
All parametters are otpionnal.
minified
: boolean, should the styles be minified.incldues
: the file complete path (en: /Volumes/Projects/foo/bar.scss
) contains at least one of the elements of the array. Default value is ['.css', '.pcss', '.sass', '.scss']
.excludes
: the file complete path does not contain any of the elements of the array. Default value is ['node_modules']
.presetEnv
: see https://github.com/csstools/postcss-preset-env for complete details.If you have the following styles file:
$mainColor: #00c;
body {
color: #000;
}
.__SCOPE {
color: #c00;
> .example {
color: $mainColor;
}
}
And you import them in a JavaScript file with import AppStyles from './AppStyles.scss';
, you obtain this object:
{
hash: '_a7af0989',
style: `body{
color:#000
}
._a7af0989{
color:#c00
}
._a7af0989 > .example{
color:#00c
}`
}
It should be injected in a style
tag in your DOM.
The value of
styles
will be minified if you passminified: true
in the options and will be:body{color:#000}._8fd83ea9dc8f28944de69aac4284bba3{color:#c00}._8fd83ea9dc8f28944de69aac4284bba3>.example{color:#00c}
FAQs
A rollup plugin to import transpiled styles files as modules width PostCSS.
The npm package @acta/rollup-plugin-postcss receives a total of 0 weekly downloads. As such, @acta/rollup-plugin-postcss popularity was classified as not popular.
We found that @acta/rollup-plugin-postcss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.