
Security News
/Company News
Securing the Financial Frontier: How Capital One Uses Socket for Open Source Security
Capital One is partnering with Socket to proactively secure its open source supply chain.
@jesscss/plugin-less
Advanced tools
The Less language engine for Jess — the Less parser wired in with Less v5 rendering defaults.
This is the Less language engine behind the shipping alpha surface.
plugin-less layers the Less grammar (@jesscss/less-parser) onto the Jess
compiler, registers the Less built-in functions (@jesscss/fns), and sets the
current output defaults. The jess CLI loads it by default, so if you render
.less you are already using it — you don't need to install this package
separately for normal CLI use.
.less into the Jess AST and hands it to the engine for a single
evaluate-and-emit pass.lighten(), percentage(),
string and list helpers, etc. are available during evaluation.The defaults this plugin applies:
collapseNesting: false — nesting is preserved by default. Less 4.x
flattened selectors; in v5 that flattening is an explicit opt-in
(--collapse-nesting on the CLI).mathMode: 'parens-division', unitMode: 'preserve', equalityMode: 'less',
leakyScope: true, bubbleRootAtRules: true.These keep the current Less-facing surface aligned on one set of output semantics.
Alpha. This is the shipping Less-facing engine in the current Jess alpha. It renders real Less, but it is early software with known rendering gaps and expected failures; don't ship it to production yet, and please report bugs.
The programmatic plugin/compiler API is not yet stabilized — the jess CLI
is the documented public surface for the alpha. Watch the
docs site for the API once it settles.
FAQs
A Less stylesheet engine for Jess
The npm package @jesscss/plugin-less receives a total of 114 weekly downloads. As such, @jesscss/plugin-less popularity was classified as not popular.
We found that @jesscss/plugin-less demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
/Company News
Capital One is partnering with Socket to proactively secure its open source supply chain.

Security News
Socket CTO Ahmad Nassri discusses how to keep AI agents from bypassing package blocks, limit credential access, and monitor their actions.

Security News
GPT-6 Astra tried to plant malicious code in simulated open source projects using fake GitHub accounts and deceptive PRs during an assigned CTF challenge.