
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@haldi/style-guide
Advanced tools
This package is a high level abstraction of our site-wide CSS for haldi.com. It makes use of CSS variables and TypeScript to make the same values available in CSS and JS. Optionally, this package supports TailwindCSS as well to really speed development up, while keeping it customized.
# Standard NPM install
npm i @haldi/style-guide
The goal of this abstraction is to provide a consistent base
for all our CSS in a single package which we can then import into each of our services. Each consumer can take this base
and further customize
it as necessary. This will enable us to update our branding
in the future quickly and consistently.
Using CSS imports
This will import the whole style-guide so we only want to do this once. However, if we want to make use of the pure CSS variables you can also import the variables independently to prevent duplication.
@import '@haldi/style-guide';
/* or */
@import '@haldi/style-guide/dist/variables';
TypeScript / Javscript
Each time we create :root
CSS variables we create the equivalent in TypeScript. Then we export the same API for both CSS/TS and generate types
while we compile the TypeScript to Javascript.
import { color, font, grid, media } from '@haldi/style-guide';
// Simple Component
const Component = () => {
return (
<div style={{ color: color.primary }}>
<h1>Hello World!</h1>
</div>
);
};
FAQs
Haldi.com | CSS Style Guide
We found that @haldi/style-guide demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.