
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
@gesslar/aunty
Advanced tools

Transform VS Code theme development from tedious to delightful.
Stop wrestling with 800+ disconnected hex codes. Create beautiful, maintainable themes with semantic variables, colour functions, and design systems that actually make sense.
VS Code theme development is a nightmare:
Write themes like a human, compile for VS Code:
Before (traditional):
{
"editor.background": "#1e1e1e",
"editor.foreground": "#e6e6e6",
"statusBar.background": "#002e63",
"panel.background": "#1a1a1a"
}
After (Aunty Rose):
vars:
accent: "#4b8ebd"
std:
fg: "#e6e6e6"
bg: "#1a1a1a"
bg.panel: lighten($(std.bg), 15)
bg.accent: darken($(accent), 15)
theme:
colors:
"editor.background": $(std.bg.panel)
"editor.foreground": $(std.fg)
"statusBar.background": $(std.bg.accent)
"panel.background": $(std.bg)
Now when you want to adjust contrast, change one variable and watch it cascade through your entire theme.
No installation needed - use with npx:
# Create your first theme
npx @gesslar/aunty build my-theme.yaml
# Watch mode for development
npx @gesslar/aunty build my-theme.yaml --watch
# Custom output location
npx @gesslar/aunty build -o ./themes my-theme.yaml
# Basic compilation
npx @gesslar/aunty build <theme-file>
# Multiple files at once
npx @gesslar/aunty build theme1.yaml theme2.yaml theme3.yaml
# Watch for changes (rebuilds automatically)
npx @gesslar/aunty build --watch my-theme.yaml
# Custom output directory
npx @gesslar/aunty build --output-dir ./my-themes my-theme.yaml
# See the compiled JSON without writing files
npx @gesslar/aunty build --dry-run my-theme.yaml
# Silent mode (only show errors)
npx @gesslar/aunty build --silent my-theme.yaml
# Debug mode (detailed error traces)
npx @gesslar/aunty build --nerd my-theme.yaml
# Lint themes for potential issues
npx @gesslar/aunty lint my-theme.yaml
| Option | Description |
|---|---|
-w, --watch | Watch files and rebuild on changes |
-o, --output-dir <dir> | Specify output directory |
-n, --dry-run | Print JSON to stdout instead of writing files |
-s, --silent | Only show errors (useful for scripts) |
--nerd | Verbose error mode with stack traces |
See what a color variable resolves to:
npx @gesslar/aunty resolve --color editor.background my-theme.yaml
Debug tokenColors syntax highlighting:
npx @gesslar/aunty resolve --tokenColor keyword.control my-theme.yaml
Debug semantic token colors:
npx @gesslar/aunty resolve --semanticTokenColor variable.readonly my-theme.yaml
This shows you the complete resolution chain for any theme property, displaying each step of variable substitution and function evaluation with colour-coded output.
| Option | Description |
|---|---|
-c, --color <key> | Resolve a specific color property to its final value |
-t, --tokenColor <scope> | Resolve tokenColors for a specific scope |
-s, --semanticTokenColor <token> | Resolve semantic token colors for a specific token type |
--nerd | Show detailed error traces if resolution fails |
Validate your theme for common issues:
npx @gesslar/aunty lint my-theme.yaml
The lint command performs comprehensive validation of your theme files to catch common issues that could cause unexpected behavior or poor maintainability.
The linter performs four types of validation:
Detects when the same syntax scope appears in multiple tokenColors rules:
# ❌ This will trigger a warning
theme:
tokenColors:
- name: "Keywords"
scope: "keyword.control, keyword.operator"
settings: { foreground: "$(accent)" }
- name: "Control Keywords"
scope: "keyword.control" # Duplicate!
settings: { foreground: "$(primary)" }
Why this matters: The second rule will never be applied since the first rule
already matches keyword.control tokens.
Catches references to variables that don't exist:
# ❌ This will trigger an error
theme:
tokenColors:
- name: "Comments"
scope: "comment"
settings: { foreground: "$(nonexistent.variable)" } # Error!
Identifies variables defined but never used in tokenColors:
# ⚠️ This will trigger a warning if never used
vars:
scope:
unused_color: "#ff0000" # Warning if not referenced anywhere
Note: Only checks variables under scope.* since other variables might be
used in the colors section.
Detects when broad scopes mask more specific ones due to rule ordering:
# ❌ This will trigger a warning
theme:
tokenColors:
- name: "All Keywords"
scope: "keyword" # Broad scope
settings: { foreground: "$(primary)" }
- name: "Control Keywords"
scope: "keyword.control" # More specific, but will never match!
settings: { foreground: "$(accent)" }
Why this matters: The second rule will never be applied because the first
rule already matches all keyword.* tokens. Reorder rules from most specific
to least specific.
| Option | Description |
|---|---|
--nerd | Show detailed error traces if linting fails |
# my-awesome-theme.yaml
config:
name: "My Awesome Theme"
type: dark
vars:
# Your colour palette
primary: "#4b8ebd"
success: "#4ab792"
error: "#b74a4a"
# Build semantic relationships
std:
fg: "#e6e6e6"
bg: "#1a1a1a"
accent: $(primary)
bg.accent: darken($(accent), 15)
theme:
colors:
# Editor
"editor.foreground": $(std.fg)
"editor.background": $(std.bg)
"editor.selectionBackground": $(std.bg.accent)
# UI
"statusBar.background": $(std.bg.accent)
"activityBar.background": $(std.bg)
"sideBar.background": $(std.bg)
Aunty Rose is built on Culori, a comprehensive colour manipulation library. This means if Culori supports it, Aunty Rose supports it automatically - no configuration needed.
While Aunty Rose provides common functions like lighten(), darken(), and
mix(), you have access to the entire spectrum of colour formats:
vars:
# Use any colour space Culori understands
lab_colour: lab(50 20 -30) # LAB colour space
hwb_colour: hwb(180 30% 20%) # HWB (Hue-Whiteness-Blackness)
lch_colour: lch(70 40 180) # LCH colour space
p3_colour: color(display-p3 0.4 0.8 0.2) # Display P3 gamut
rec2020: color(rec2020 0.42 0.85 0.31) # Rec. 2020 colour space
# Mix and match freely
primary: oklch(0.6, 20, 220)
secondary: mix($(primary), lab(80 -20 40), 30)
accent: lighten(hwb(240 20% 10%), 15)
The rule is simple: Write any colour expression that Culori can parse, and Aunty Rose will handle it. No need to memorize function lists or check compatibility - if it's a valid colour, it works.
Learn More: Explore the full range of supported colour formats and functions in the Culori documentation.
Make colours that work together:
| Function | Example | Result |
|---|---|---|
lighten(colour, %=0-100) | lighten($(bg), 25) | 25% lighter background |
darken(colour, %=0-100) | darken($(accent), 30) | 30% darker accent |
alpha(colour, alpha=0-1) | alpha($(brand), 0.5) | Set exact transparency |
fade(colour, alpha=0-1) | fade($(accent), 0.5) | Reduce opacity by 50% |
solidify(colour, alpha=0-1) | solidify($(bg.accent), 0.3) | Increase opacity by 30% |
mix(colour1, colour2, %=0-100) | mix($(fg), $(accent), 20) | Blend 20% accent |
mix(colour1, colour2) | mix($(fg), $(accent)) | Blend 50% accent |
invert(colour) | invert($(fg)) | Perfect opposite |
hsv(h=0-255, s=0-255, v=0-255) | hsv(50, 200, 180) | HSV colour (hue 50, saturation 200, value 180) |
hsva(h=0-255, s=0-255, v=0-255, a=0-1) | hsva(50, 200, 180, 0.5) | HSV with 50% opacity |
hsl(h=0-360, s=0-100, l=0-100) | hsl(200, 50, 40) | HSL colour (200° hue, 50% saturation, 40% lightness) |
hsla(h=0-360, s=0-100, l=0-100, a=0-1) | hsla(200, 50, 40, 0.5) | HSL with 50% opacity |
rgb(r=0-255, g=0-255, b=0-255) | rgb(139, 152, 255) | RGB colour (139 red, 152 green, 255 blue) |
rgba(r=0-255, g=0-255, b=0-255, a=0-1) | rgba(139, 152, 255, 0.5) | RGB with 50% opacity |
oklch(l=0-1, c=0-100, h=0-360) | oklch(0.7, 25, 180) | OKLCH colour (70% lightness, 25 chroma, 180° hue) |
oklcha(l=0-1, c=0-100, h=0-360, a=0-1) | oklcha(0.5, 30, 45, 0.8) | OKLCH with 80% opacity |
css(name) | css(tomato) | CSS named colour (tomato, skyblue, etc.) |
Note: In all of these functions,
colourcan be a raw hex (#ff66cc), a variable ($(accent)), a CSS named colour (css(tomato)), or another colour function (rgba(255, 100, 200, 0.5),darken($(bg), 20),oklcha(0.7, 25, 180, 0.8)).
Use CSS colour names with the css() function:
vars:
# CSS named colours
danger: css(crimson)
ocean: css(deepskyblue)
nature: css(forestgreen)
# Mix named colours with functions
muted_red: fade(css(tomato), 0.6)
light_blue: lighten(css(navy), 40)
Reference: See the complete list of CSS named colours at MDN Web Docs or Wikipedia.
Use any of these syntaxes (they're identical):
vars:
accent: "#4b8ebd"
# All equivalent:
variant1: $(accent) # Recommended
variant2: $accent # Short form
variant3: ${accent} # Braced form
# Create a new theme file
touch ocean-theme.yaml
# Start watching for changes
npx @gesslar/aunty build --watch ocean-theme.yaml
After compilation, you'll get a .color-theme.json file:
~/.vscode/extensions/my-themes/themes/yo code to create a theme extensionCtrl+K Ctrl+T in VS Code to switch themesWith watch mode, every save triggers recompilation. VS Code will automatically reload your theme changes.
Aunty Rose generates standard VS Code theme files:
my-theme.yaml → my-theme.color-theme.json
The output file name is based on your input file, with .color-theme.json
extension.
Break your themes into reusable components using the import system:
# colours.yaml
vars:
palette:
primary: "#4b8ebd"
success: "#4ab792"
error: "#b74a4a"
warning: "#b36b47"
---
# my-theme.yaml
config:
name: "My Theme"
type: dark
imports:
vars:
colors: "./colours.yaml"
vars:
# Use imported colours
accent: $(colors.palette.primary)
# Build your design system
std:
fg: "#e6e6e6"
bg: "#1a1a1a"
accent: $(accent)
bg.accent: darken($(accent), 15)
theme:
colors:
"editor.foreground": $(std.fg)
"editor.background": $(std.bg)
"statusBar.background": $(std.bg.accent)
Aunty Rose supports importing different types of theme components:
config:
imports:
# Import variables (merged into your vars section)
vars:
colors: "./shared/colours.yaml"
# Can import multiple files
typography: ["./shared/fonts.yaml", "./shared/sizes.yaml"]
# Import global configuration
global:
base: "./shared/base-config.yaml"
# Import VS Code colour definitions
colors:
ui: "./shared/ui-colours.yaml"
# Import syntax highlighting rules
tokenColors:
syntax: "./shared/syntax.yaml"
# Import semantic token colours
semanticTokenColors:
semantic: "./shared/semantic.yaml"
Import Format Options:
"./path/to/file.yaml"["./file1.yaml", "./file2.yaml"].yaml and .json5 are supportedMerge Order:
The merge happens in a precise order with each level overriding the previous:
global imports (merged first)colors importstokenColors importssemanticTokenColors importsWithin each section, if you import multiple files, they merge in array order. This layered approach gives you fine-grained control over which definitions take precedence.
Perfect for theme development - see changes instantly:
npx @gesslar/aunty build my-theme.yaml --watch
Now edit your YAML file and watch VS Code update automatically!
# ❌ Don't start with random colours
vars:
red: "#ff0000"
blue: "#0000ff"
# ✅ Start with semantic meaning
vars:
status:
error: "#b74a4a"
success: "#4ab792"
ui:
background: "#1a1a1a"
surface: lighten($(ui.background), 15)
# Colours that harmonize automatically
vars:
base: "#4b8ebd"
harmonies:
lighter: lighten($(base), 20)
darker: darken($(base), 20)
complement: mix($(base), invert($(base)), 50)
muted: mix($(base), "#808080", 30)
# OKLCH colours for perceptually uniform adjustments
oklch_palette:
primary: oklch(0.6, 20, 220) # Blue with controlled chroma
accent: oklch(0.7, 25, 45) # Warm orange complement
muted: oklch(0.5, 8, 220) # Desaturated blue
bright: oklcha(0.8, 30, 220, 0.9) # Bright blue with transparency
Always test your themes with actual code files to see how syntax highlighting looks with your colour choices.
Check out the /examples folder for complete theme files showing
different approaches and techniques.
Theme not appearing in VS Code:
.color-theme.jsonCtrl+Shift+P → "Developer: Reload Window")Compilation errors:
# See detailed error information
npx @gesslar/aunty build --nerd my-theme.yaml
# Check what a specific variable resolves to
npx @gesslar/aunty resolve --token problematic.variable my-theme.yaml
Variables not resolving:
Watch mode not updating:
/examples directoryThe Unlicense - Use this however you want! The idea of copyrighting colour arrangements is absurd.
Aunty Rose: Because your themes deserve better than hex codes.
FAQs
Make gorgeous themes that speak as boldly as you do.
We found that @gesslar/aunty demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.