Security News
/Company News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
By Sarah Gooding - Oct 01, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
@jesscss/core
Advanced tools
Jess Core - Syntax Tree & Core Evaluation
This is separate from the jess package, because it contains the AST, therefore parsers can import this package to export an AST, and jess can import the parser + core. (Avoids circular dependencies.)
Data structures
Evaluation uses native Array for queues (push/shift) and Map for registries — no external data-structure libraries. The eval queue is partitioned by priority; rules are evaluated in order with retry/step-down for StyleImport only.
FAQs
The Jess Core Library
The npm package @jesscss/core receives a total of 107 weekly downloads. As such, @jesscss/core popularity was classified as not popular.
We found that @jesscss/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 08 Mar 2026
Related posts
Security News
Insecure Agents Podcast: How to Keep AI Agents From Bypassing Security Controls
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.
By Sarah Gooding - Oct 01, 2026
Security News
New AISI Report Details How GPT-6 Astra Turned CTF Challenges Into Supply Chain Attacks
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.
By Sarah Gooding - Sep 30, 2026