![Maven Central Adds Sigstore Signature Validation](https://cdn.sanity.io/images/cgdhsj6q/production/7da3bc8a946cfb5df15d7fcf49767faedc72b483-1024x1024.webp?w=400&fit=max&auto=format)
Security News
Maven Central Adds Sigstore Signature Validation
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
@cobalt-ui/cli
Advanced tools
CLI for managing design tokens using the Design Tokens Community Group (DTCG) standard and generating code for any platform via plugins.
CLI for managing Design Tokens Community Group (DTCG) token manifests (tokens.json
) and generating code for any platform via plugins.
Install:
npm i -D @cobalt-ui/cli
And place a tokens.config.mjs
file in the root of your project. Here are all the options, along with defaults:
// tokens.config.mjs
/** @type {import("@cobalt-ui/core").Config} */
export default {
/** path to tokens.json */
tokens: "./tokens.json",
/** output directory for generated code*/
outDir: "./tokens/",
/** plugins to generate different outputs */
plugins: [],
};
All CLI commands require a config to work properly, with the exception of co check
and co convert
.
npx co [command]
Command | Notes |
---|---|
build | Turn design tokens into output files using [plugins]((https://cobalt-ui.pages.dev/docs//integrations). You can watch for changes in dev mode with build --watch . |
bundle --out [path] | Bundle multiple tokens.json files into one, e.g. co bundle --out path/to/output.json . Can output .json or .yaml . Requires multiple schemas set in config |
check [path] | Validate a tokens.json file and check for errors. This won’t output any files. |
init | Create a starter tokens.json file. |
convert [path] --out [path] | Convert a Style Dictionary JSON file to DTCG (docs) |
Plugins are the entire purpose of using Cobalt! See the plugin documentation for instructions on getting started.
FAQs
CLI for managing design tokens using the Design Tokens Community Group (DTCG) standard and generating code for any platform via plugins.
The npm package @cobalt-ui/cli receives a total of 0 weekly downloads. As such, @cobalt-ui/cli popularity was classified as not popular.
We found that @cobalt-ui/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Maven Central now validates Sigstore signatures, making it easier for developers to verify the provenance of Java packages.
Security News
CISOs are racing to adopt AI for cybersecurity, but hurdles in budgets and governance may leave some falling behind in the fight against cyber threats.
Research
Security News
Socket researchers uncovered a backdoored typosquat of BoltDB in the Go ecosystem, exploiting Go Module Proxy caching to persist undetected for years.