
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@fabric-ds/css
Advanced tools
This is the core package for Fabric CSS, FINNs design system.
The package includes resets, core components and Tailwind utility classes tuned for FINN.
The CSS should be used directly from Eik. This is because we can alias releases by major versions.
<link href="https://assets.finn.no/pkg/@fabric-ds/css/v1/fabric.min.css" rel="stylesheet" />
npm install @fabric-ds/css
Install dependencies:
npm install
Start a dev server:
npm run dev
Changes to to either the CSS, Tailwind configuration or the HTML files should hot reload.
We use commitizen to ensure coherent commit message structure, used by semantic release to generate change logs and handle versioning.
npm install -g commitizen
When installed, you should be able to type cz or git cz in your terminal to commit your changes (replacing
git commit).
This project uses Semantic Release to automate package
publishing when making changes to the main or next branch.
It is recommended to branch off the next branch and follow
conventional commits when making changes. When your
changes are ready for pull request, this should be opened against the next branch.
Read more in-depth about Fabric Releases here.
Please note that the version published will depend on your commit message structure. Make sure to use commitizen (see Development section).
1.2.0-next.1 (2022-11-16)
FAQs
Fabric CSS core components and utilities
We found that @fabric-ds/css demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.