
Security News
The Code You Didn't Write Is Still Yours to Defend
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.
@fortanix/baklava
Advanced tools
This repository contains the Baklava design system used to build Fortanix products.
You can find the latest Storybook documentation here.
Requirements:
ref as prop, among others)if() syntax)Installation:
npm install --save @fortanix/baklava
Add the BaklavaProvider to the top level of your application, in order to enable certain features like toast
notifications:
import { BaklavaProvider } from '@fortanix/baklava';
export const App = () => {
<BaklavaProvider>
<MyApp/>
</BaklavaProvider>
};
To import a component:
import { Button } from '@fortanix/baklava';
For the styling, add the following import to your main .scss file (assumes you have Sass set up):
@use '@fortanix/baklava';
Icons are loaded through SVG sprites. This requires some additional setup. If you're using vite, install the
vite-plugin-svg-icons-ng plugin:
npm install --save vite-plugin-svg-icons-ng
Then, add the following to the plugins array in your vite config:
import { createSvgIconsPlugin } from 'vite-plugin-svg-icons-ng';
export default {
plugins: [
createSvgIconsPlugin({
iconDirs: [path.resolve(__dirname, 'node_modules/@fortanix/baklava/src/assets/icons')],
symbolId: 'baklava-icon-[name]',
inject: 'body-last',
customDomId: 'baklava-icon-sprite',
}),
],
};
Additionally, you will need to add the following import in your main entry file:
import 'virtual:svg-icons/register';
Please make sure that Baklava is the first CSS that gets loaded in to your bundle. Baklava relies on CSS
cascade layers for its specificity
management. If your application emits any code that uses an @layer name that is also used by Baklava
(like baklava.components), and Baklava's layer ordering is not emitted first, then the ordering of the layers will
get messed up (since browsers order layers by source order). If you want, you can also just emit the layers ordering
from Baklava explicitly (rather than the whole bundle):
@use '@fortanix/baklava/styling/layers.scss';
@include layers.styles;
We gratefully accept bug reports and contributions from the community. By participating in this community, you agree to abide by Code of Conduct. All contributions are covered under the Developer's Certificate of Origin (DCO).
By making a contribution to this project, I certify that:
(a) The contribution was created in whole or in part by me and I have the right to submit it under the open source license indicated in the file; or
(b) The contribution is based upon previous work that, to the best of my knowledge, is covered under an appropriate open source license and I have the right under that license to submit that work with modifications, whether created in whole or in part by me, under the same open source license (unless I am permitted to submit under a different license), as indicated in the file; or
(c) The contribution was provided directly to me by some other person who certified (a), (b) or (c) and I have not modified it.
(d) I understand and agree that this project and the contribution are public and that a record of the contribution (including all personal information I submit with it, including my sign-off) is maintained indefinitely and may be redistributed consistent with this project or the open source license(s) involved.
This project is primarily distributed under the terms of the Mozilla Public License (MPL) 2.0, see LICENSE for details.
FAQs
Fortanix Baklava design system
We found that @fortanix/baklava demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
AI agents are pulling packages into environments no scanner is watching, creating exposure before security teams can see it.

Security News
GitHub Actions checkout now blocks risky pull_request_target checkouts by default to help prevent pwn request supply chain attacks.

Product
Socket now supports Custom Roles and Repository Access Permissions so organizations can control who can access specific repositories and actions.