
Product
Socket Brings Supply Chain Security to skills.sh
Socket is now scanning AI agent skills across multiple languages and ecosystems, detecting malicious behavior before developers install, starting with skills.sh's 60,000+ skills.
@gojek/asphalt-web-tokens
Advanced tools
Tokens are the building block of our design system and foundation of theming. Asphalt Web Tokens acts as a bridge between components and theming by abstracting the logic of fetching & processing tokens and theme creation. It works as per the theme specification.
This package exports
variables, theme & getTheme as named exports
tokens & format as parameters.Theme has three formats -
npm install @gojek/asphalt-web-tokens
import { theme } from “@gojek/asphalt-web-tokens”
yarn add @gojek/asphalt-web-tokens
import { theme } from “@gojek/asphalt-web-tokens”
Token Studio uses its sync feature to save the raw tokens into the token.json file within each theme.
Open theme-generation.js script inside the scripts folder.
Change the import statement import asphaltWebTokens from "../packages/asphalt-web-tokens/src/lib/token.json" assert { type: "json" }; to required theme's token.json.
For example: import asphaltWebTokens from ../packages/theme-asphalt-web-aloha/token.json { type: "json" }
Change the themeName parameter to a relevant name.
For example: asphalt-web-aloha
Run the script using node scripts/theme-generation.js
master branch.yarn run buildyarn run releasegit push --follow-tags origin master to push the tags to origin.npm adduser --registry https://registry.npmjs.org, make sure you have permission to @gojek project on public npm, reach out to @detj for access.npm publishFAQs
Handles Asphalt Web default theme and tokens generation
We found that @gojek/asphalt-web-tokens demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket is now scanning AI agent skills across multiple languages and ecosystems, detecting malicious behavior before developers install, starting with skills.sh's 60,000+ skills.

Product
Socket now supports PHP with full Composer and Packagist integration, enabling developers to search packages, generate SBOMs, and protect their PHP dependencies from supply chain threats.

Security News
An AI agent is merging PRs into major OSS projects and cold-emailing maintainers to drum up more work.