
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@framingui/esbuild-plugin
Advanced tools
esbuild plugin for build-time token compliance validation.
Scans your codebase during build to ensure 100% token compliance. Fails the build if hardcoded CSS values are detected.
pnpm add -D @tekton/esbuild-plugin
import { build } from 'esbuild';
import { tektonPlugin } from '@tekton/esbuild-plugin';
await build({
entryPoints: ['src/index.ts'],
bundle: true,
plugins: [
tektonPlugin({
strict: true, // Fail build on violations (default: true in production)
threshold: 100, // Required compliance percentage
verbose: true, // Enable logging
reportPath: './tekton-report.txt', // Optional report file
}),
],
});
import { defineConfig } from 'tsup';
import { tektonPlugin } from '@tekton/esbuild-plugin';
export default defineConfig({
entry: ['src/index.ts'],
esbuildPlugins: [
tektonPlugin({
strict: process.env.NODE_ENV === 'production',
}),
],
});
interface TektonPluginOptions {
strict?: boolean; // Fail build on violations (default: true in prod)
include?: RegExp[]; // File patterns to include (default: /.tsx?$/)
exclude?: RegExp[]; // File patterns to exclude (default: node_modules, tests)
threshold?: number; // Compliance threshold (default: 100)
reportPath?: string; // Generate report file
verbose?: boolean; // Enable verbose logging
}
strict: false): Warns about violations but doesn't fail buildstrict: true): Fails build if any violations are found// ❌ Detected violations:
styled.div`
background: #ffffff; // Error: hex color "#ffffff"
// Suggestion: tokens.bg.* or tokens.fg.*
padding: 16px; // Error: pixel spacing "16px"
// Suggestion: tokens.spacing[4]
`;
MIT
FAQs
esbuild plugin for build-time token compliance validation
The npm package @framingui/esbuild-plugin receives a total of 0 weekly downloads. As such, @framingui/esbuild-plugin popularity was classified as not popular.
We found that @framingui/esbuild-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.