Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@bliss-design-system/tokens
Advanced tools
This repository exists as a single source of truth for Bliss design tokens.
This repository exists as a single source of truth for Bliss design tokens.
Design tokens define the visual foundations of the Bliss Design System - including 🎨 colors, ⌨️ typography, ↔️ spacing, and more. These are values that are determined by the designs of the BRYTER brand and product.
To use the design tokens, install the package in the root of your client-facing application:
yarn add @bliss-design-system/tokens
After installation, load the design tokens directly into your Sass stylesheet with the @use command:
@use '@bliss-design-system/tokens';
From there, you can access the values using the tokens
prefix:
@mixin example() {
width: tokens.$space-6;
font-size: tokens.$font-size-8;
font-weight: tokens.$font-weight-bold;
}
You'll find the JSON files describing the design tokens in the src
folder, sorted by category. Within each category, there will be an options.json
and/or patterns.json
file.
Options supply the foundations for the visual elements. These contain defined yet obscure values and transform them into variables that have meaning.
An example of color options:
"gray": {
"0": { "value": "#F4F4F6" },
"100": { "value": "#E2E5E9" },
"200": { "value": "#CCD0D7" }
}
Patterns take the available options and turn them into decisions. These tokens make an explicit decision about which of the option tokens to use for specific implementations.
Here's what it'd look like if we provided tokens for text colors based on interactive state:
"color-action-text-primary-default" : gray.0,
"color-action-text-primary-hover" : gray.500
If you'd like to contribute, please open an issue with your suggested change. This issue will automatically be added to the Bliss Proposal Board. Once that is accepted, either the Bliss team will work on it or you can make changes locally.
If you would like to contribute, run the following:
# Clone and move into this repository
git clone https://gitlab.com/bliss-design-system/tokens.git
cd tokens
# Install the dependencies
yarn
Notice something off? Please open an issue using our Bug Report
template and fill in as many details as possible.
We follow the Conventional Commits specification, meaning that you'll be prompted to fill out a descriptive message when you commit. We also use these commits to manage our releases, so we appreciate details.
As a guideline for this toolkit, we recommend the following:
fix
)feat
)⚠️ If you are removing or renaming tokens, please speak with the Bliss team, as this will qualify as a major version and involves a breaking change.
When you're ready to open a merge request, please use a descriptive title and fill out the provided template.
The team will be notified, but it helps to post your merge request in #bliss_support.
We'll fill this section out as we go and as issues are raised. But if you haven't found what you're looking for, get in touch via bliss@bryter.io or via the #bliss_support Slack channel ✨.
FAQs
This repository exists as a single source of truth for Bliss design tokens.
We found that @bliss-design-system/tokens demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.