
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@gitbutler/design-core
Advanced tools
Design tokens and fonts for GitButler applications. This package provides CSS custom properties, design tokens in JSON format, and web fonts used across GitButler products.
npm install @gitbutler/design-core
Import the design tokens CSS file:
@import "@gitbutler/design-core/tokens";
Or in JavaScript/TypeScript:
import "@gitbutler/design-core/tokens";
This provides CSS custom properties for colors, spacing, typography, and other design tokens with automatic light/dark mode support.
Import all fonts:
@import "@gitbutler/design-core/fonts";
Or import individual font families:
@import "@gitbutler/design-core/fonts/inter/Inter-Regular.woff2";
@import "@gitbutler/design-core/fonts/geist-mono/GeistMono-Regular.woff2";
@import "@gitbutler/design-core/fonts/but-head/But-Head-Regular.woff2";
Import the core CSS styles:
@import "@gitbutler/design-core/core";
Import individual style utilities:
@import "@gitbutler/design-core/styles"; /* Base styles */
@import "@gitbutler/design-core/styles/base"; /* Base styles */
@import "@gitbutler/design-core/styles/reset"; /* CSS reset */
@import "@gitbutler/design-core/styles/text"; /* Text utilities */
Import all utility classes at once:
@import "@gitbutler/design-core/utility";
Or in JavaScript/TypeScript:
import "@gitbutler/design-core/utility";
Or import individual utility class files:
@import "@gitbutler/design-core/utility/general"; /* Border radius, colors, borders */
@import "@gitbutler/design-core/utility/helpers"; /* Scrollbar helpers, stack utilities */
@import "@gitbutler/design-core/utility/layout"; /* Spacing, positioning, flexbox, overflow, text alignment */
General utilities include:
.radius-s, .radius-m, .radius-ml, .radius-l).clr-bg-1, .clr-bg-2, .clr-bg-3 and their muted variants).clr-border-1, .clr-border-2, .clr-border-3).clr-text-1, .clr-text-2, .clr-text-3)Helper utilities include:
.hide-native-scrollbar, .scrollbar).stack-v, .stack-h)Layout utilities include:
.relative, .absolute, .fixed, .sticky, positioning utilities).full-width, .full-height).flex, .flex-col, alignment and justify utilities, flex grow/shrink).overflow-hidden, .overflow-auto, .overflow-scroll, .overflow-visible).text-center, .text-left, .text-right, .text-nowrap)@gitbutler/design-core/tokens - CSS custom properties@gitbutler/design-core/fonts - All font CSS declarations@gitbutler/design-core/fonts/* - Individual font files@gitbutler/design-core/core - Core CSS styles@gitbutler/design-core/styles - Base style utilities@gitbutler/design-core/styles/base - Base styles@gitbutler/design-core/styles/reset - CSS reset@gitbutler/design-core/styles/text - Text utilities@gitbutler/design-core/utility - All utility classes (combined)@gitbutler/design-core/utility/general - General utility classes (borders, colors)@gitbutler/design-core/utility/helpers - Helper utility classes (scrollbar, stacks)@gitbutler/design-core/utility/layout - Layout utility classes (spacing, flexbox, positioning)This package uses Terrazzo to generate CSS custom properties from design tokens.
# Install dependencies
npm install
# Build tokens
npm run build
# Watch for changes
npm run dev:tokens
hue-dini is the tool used to preview and export the GitButler color palette. It applies a single shared luminance scale across all hues — gray, accent, and semantic — so shades at the same step feel visually equivalent regardless of hue.
Live: https://gitbutlerapp.github.io/design-core/
cd tools/hue-dini
pnpm install
pnpm dev
See tools/hue-dini/README.md for more details.
FAQs
Design tokens for GitButler applications
We found that @gitbutler/design-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.