@jesscss/plugin-js
Advanced tools
Jess plugin for JavaScript/TypeScript module imports with Deno runtime checks
Import bridge for JavaScript/TypeScript modules in stylesheets — a seed of the JavaScript-execution / CSS-in-JS story.
This plugin lets a stylesheet pull in JavaScript/TypeScript modules
(.js, .mjs, .cjs, .ts, .mts, .cts) — the mechanism behind @use /
@-from script imports and legacy Less @plugin loading. When installed, it is
auto-loaded by jess.
plugin-js does not run untrusted module code in your Node process. Before
executing anything, it checks for a usable Deno runtime (deno --version)
and runs the module in a Deno subprocess behind a permission broker:
node_modules (and an optional jsReadRoot),allowHttp, optionally scoped to
allowNetHosts),Values cross the boundary through a small typed bridge (dimensions, colors,
quoted strings, lists, detached rules, …). Built-in @jesscss/fns modules are
trusted and imported directly, without the worker. If no Deno binary is found,
the plugin fails with a clear message instead of falling back to unsandboxed
execution.
One of the four tools Jess aims to converge is
CSS-in-JS: running real JavaScript inside stylesheets so styles can be
dynamic without leaving CSS files. This plugin — together with
@jesscss/plugin-node-modules, which resolves the
packages — is a seed of that story.
That convergence is roadmap — being proven through the alpha, not claimed as
done. Legacy Less @plugin is supported for compatibility but deprecated in
favor of @-from / @-use.
Alpha. Part of Jess. Requires a Deno runtime for script execution. The
programmatic plugin/compiler API is not yet stabilized — the jess CLI is
the documented public surface for the alpha. Watch the
docs site for the API once it settles.
FAQs
Jess plugin for JavaScript/TypeScript module imports with Deno runtime checks
The npm package @jesscss/plugin-js receives a total of 554 weekly downloads. As such, @jesscss/plugin-js popularity was classified as not popular.
We found that @jesscss/plugin-js demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
Security News
It has been one year since Shai-Hulud made its first appearance on npm.
Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.