
Product
Introducing Socket Scanning for OpenVSX Extensions
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@equinor/eds-tokens
Advanced tools
Design tokens used in the Equinor Design System (EDS), such as colours, spacings and typography.
pnpm add @equinor/eds-tokens
import { tokens } from '@equinor/eds-tokens'
ot, woff or woff2 font required)This repository contains a couple of GitHub Actions workflows:
These workflows demonstrate bi-directional syncing between variables in Figma and design tokens in a codebase using Figma's Variables REST API. For more background and a graphical representation of what these workflows do, see our Syncing design systems using Variables REST API FigJam file.
To use these workflows, you should copy the code in this repository into your organization and modify it to suit the needs of your design processes.
To use the "Sync Figma variables to tokens" workflow, you must be a full member of an Enterprise org in Figma. To use the "Sync tokens to Figma" workflow, you must also have an editor seat.
Both workflows assume that you have a single Figma file with local variable collections, along with one or more tokens json files in the tokens/ directory that adhere* to the draft W3C spec for Design Tokens. For demonstration purposes, this directory contains the tokens exported from the Get started with variables Community file. Have a copy of this file ready if you want to try out the workflow with these existing tokens.
*See
src/token_types.tsfor more details on the format of the expected tokens json files, including the deviations from the draft design tokens spec we've had to make. We expect there to be one tokens file per variable collection and mode.
In addition, you must also have a personal access token for the Figma API to allow these workflows to authenticate with the API. For the "Sync Figma variables to tokens" workflow, the token must have at least the Read-only Variables scope selected. For the "Sync tokens to Figma" workflow, the token must have the Read and write Variables scope selected.
Before running either of these workflows, you'll need to create an encrypted secret in your repository named GH_ACTION_VARIABLES_SYNC_FIGMA_TOKEN containing your personal access token.
Both workflows are configured to run manually for demonstration purposes, and are designed to be as conservative as possible in their functionality (see details below).
To run the "Sync Figma variables to tokens" workflow:
https://www.figma.com/file/{file_key}/{title}.tokens/ directory. If there are no changes to be made, then a pull request will not be created.This workflow has some key behaviors to note:
To run the "Sync tokens to Figma" workflow:
https://www.figma.com/file/{file_key}/{title}. Note: if you are trying out this workflow for the first time, use a file that is separate from your design system to avoid any unintended changes.This workflow has some key behaviors to note:
You can run the GitHub actions locally by running pnpm install and creating a .env file.
Example:
PERSONAL_ACCESS_TOKEN="your_personal_access_token"
How to create your personal access token
and then running:
# Defaults to writing to the tokens directory
pnpm run update-tokens
# and / or
pnpm run update-figma
FAQs
Design tokens for the Equinor Design System
The npm package @equinor/eds-tokens receives a total of 14,793 weekly downloads. As such, @equinor/eds-tokens popularity was classified as popular.
We found that @equinor/eds-tokens demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Product
Bringing supply chain security to the next generation of JavaScript package managers

Product
A safer, faster way to eliminate vulnerabilities without updating dependencies