
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@haydn/universal
Advanced tools
A CSS reset that strips away almost all of the default browser styles so you can just set the values you want.
A CSS reset that reduces styles to the bare minimum.
You can add the CSS to a file directly via unpkg:
<link
rel="stylesheet"
href="https://unpkg.com/@haydn/universal@latest/universal.css"
/>
Alternatively, in a JavaScript project you can install the package via npm:
npm i @haydn/universal
If your project uses a bundler like Webpack or Parcel, you can import the CSS file directly:
import "@haydn/universal/universal.css";
The default styles are removed by a all: unset declaration applied to all
elements except the following:
head elementAll HTML elements are given a box-sizing: border-box declaration except the
head element and metadata
content
elements.
All ::before and ::after pseudo-elements are given a box-sizing: inherit
declaration.
Following elements are given a display: block declaration:
addressarticleasideaudioblockquotebodycanvasdddetailsdialogdivdldtfieldsetfigcaptionfigurefooterformh1h2h3h4h5h6headerhgrouphriframeimglimainmathnavobjectolppresectionsvgulvideoThe display properties for table elements are reset back to their normal values:
table (display: table)thead (display: table-header-group)tbody (display: table-row-group)tfoot (display: table-footer-group)tr (display: table-row)th (display: table-cell)td (display: table-cell)Additionally, the border-collapse property is set to collapse for table elements.
All embedded
content
elements are given border: none and max-width: 100% declarations:
audiocanvasiframeimgmathobjectsvgvideoThis reset removes some important accessibility defaults. If you use this reset, you should add your own styles to ensure your content is accessible, most importantly:
FAQs
A CSS reset that strips away almost all of the default browser styles so you can just set the values you want.
We found that @haydn/universal demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.