
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@clair/theme-default
Advanced tools
Common styles for ClairDesign.
import '@clair/dist/index.css'
如果希望启用一系列 focus-visible
的样式,需要使用 focus-visible polyfill。
// 可以参照 `src/_variable.scss` 文件覆盖变量
$--primary-color: #f0f;
@import '~@clair/scss/index';
如果希望启用一系列 focus-visible
的样式,请自行引入 polyfill。,并使用 PostCSS 插件 进行处理。
开发新组件时,请在 html/
目录下新建一个 HTML 文件,如 html/component.html
,内容复制 html/_template.html
即可。
然后执行命令:
# 注意替换文件名
npx parcel ./html/component.html
# OR
yarn dev component
采用 dart-sass
编译,因为安装快。(PS: parcel 现在也是使用 dart-sass
哟)
使用下面的命令可完成构建:
npm run build
# OR
./scripts/build.sh
FAQs
common styles for clair design
The npm package @clair/theme-default receives a total of 2 weekly downloads. As such, @clair/theme-default popularity was classified as not popular.
We found that @clair/theme-default demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.