
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@atb-as/token
Advanced tools
PostCSS plugin that adds a token() function to CSS. It accepts a variable in dot separated syntax. This call will fail if the CSS variable does not exist.
This package adds a token(...) function to your CSS, which checks and parses the token passed in the argument and turns it into a CSS Custom Property (var(--variable-name)).
Install PostCSS and this plugin as dev dependencies.
yarn add postcss @atb-as/token --dev
Add a postcss.config.json file in the root of your project with the following content, or extend the current one.
/** postcss.config.json */
{
"plugins": [
"@atb-as/token"
]
}
⚠️ NextJS preconfigures PostCSS. Therefore, we need to include the entire NextJS config for PostCSS and add the
@atb-as/tokenplugin in addition.
For NextJS 15.0.3, the default PostCSS configuration with the @atb-as/token plugin shows below. This is also
confirmed to work on NextJS 14.2.13.
For this configuration to work, we also need to add other PostCSS plugins explicitly to our package.json.
yarn add postcss-flexbugs-fixes postcss-preset-env --dev
/** postcss.config.json */
{
"plugins": [
"postcss-flexbugs-fixes",
[
"postcss-preset-env",
{
"autoprefixer": {
"flexbox": "no-2009"
},
"stage": 3,
"features": {
"custom-properties": false
}
}
],
"@atb-as/token"
]
}
This plugin enables a token function in CSS, which checks the validity of the token and returns the
matching CSS Custom Property.
token(variable): string
Replaces the token call with the corresponding CSS Custom Property.
Throws an error if the variable does not exist or if the syntax is incorrect.
variable: string
The camelCase name of a variable surrounded by single quote ' or double quotes " segmented by a dot ../** button.module.css */
.button--primary {
color: token('color.interactive.0.foreground.primary');
background-color: token('color.interactive.0.background');
}
This is compiled to CSS Custom Properties.
/** Compiled button.module.css */
.button--primary {
color: var(--color-interactive-0-foreground-primary);
background-color: var(--color-interactive-0-background);
}
FAQs
PostCSS plugin that adds a token() function to CSS. It accepts a variable in dot separated syntax. This call will fail if the CSS variable does not exist.
The npm package @atb-as/token receives a total of 104 weekly downloads. As such, @atb-as/token popularity was classified as not popular.
We found that @atb-as/token demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 16 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.