
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@chasemccoy/figma-action
Advanced tools
A GitHub action that will export Figma components from design files to your repository.
Example workflow
name: Export SVG from Figma
on: [push]
jobs:
all:
name: Figma Export
runs-on: ubuntu-latest
steps:
- uses: primer/figma-action@v1.0.0-alpha.2
with:
args: "format=svg outputDir=./build/"
env:
FIGMA_FILE_URL: "https://www.figma.com/file/ZFjrph2HUwFK8Q3uEtJIu1PT/yourfilename"
FIGMA_TOKEN: ${{ secrets.FIGMA_TOKEN }}
Secrets
FIGMA_TOKEN
(required)
This token is used to access the Figma API. It's required to generate one so this action will work. It's recommended to set the token in a secret token in your repository.
env variables
FIGMA_FILE_URL
(required)
This is the file url that you would like to export from. The action will search the file for components and export them with your configurations.
Workflow args (optional)
format
– The export format for exporting from Figma. Options are svg
, jpg
, png
. Default is jpg
outputDir
– Where you would like the exported files to live. Default is ./build/
scale
– When choosing an image format jpg
or png
this is the export scale between 0.01
and 4
that will allow you to scale the image. Default is 1
.The output of this action lives in ./build/
by default, but can be configured. In addition to the files exported you will see a data.json
file exported. This contains information about the exported components mapped by component id
.
The directory will look like this:
./outputDir/
├── format/
| └── componentName.format
└── data.json
The data.json file will look like this:
{
"0:639": {
"name": "plus", // component name
"id": "0:639", // component figma id
"key": "89696b0b52493acc8692546ac829bd4e334c63a2", // component global figma id
"file": "FP7lqd1V00LUaT5zvdklkkZr", // figma file key
"description": "keywords: add, new, more", // figma component description
"width": 12, // width of the component frame
"height": 16, // height of the component frame
"image": "https://s3-us-west-2.amazonaws.com/figma-alpha-api/img/1/6d/1234" // aws URL for the exported file
}
}
FAQs
GitHub action for exporting Figma slices.
The npm package @chasemccoy/figma-action receives a total of 2 weekly downloads. As such, @chasemccoy/figma-action popularity was classified as not popular.
We found that @chasemccoy/figma-action demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.