
Security News
upm Launches as a Fast, Tiny Package Manager Written in TypeScript
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.
@jesscss/plugin-less
Advanced tools
The Less language engine for Jess — the Less parser wired in with Less v5 rendering defaults.
This is the one shipping surface today. Jess
is Less.js v5, and plugin-less is where that lives: it layers the Less
grammar (@jesscss/less-parser) onto the Jess compiler, registers the Less
built-in functions (@jesscss/fns), and sets the v5 output defaults. The jess
and lessc CLIs load it by default, so if you render .less you are already
using it — you don't need to install this package separately for normal CLI use.
.less into the Jess AST and hands it to the engine for a single
evaluate-and-emit pass.lighten(), percentage(),
string and list helpers, etc. are available during evaluation.lessc
CLI imports so CLI and engine defaults can never drift.The defaults this plugin applies:
collapseNesting: false — nesting is preserved by default. Less 4.x
flattened selectors; in v5 that flattening is an explicit opt-in
(--collapse-nesting on the CLI).mathMode: 'parens-division', unitMode: 'preserve', equalityMode: 'less',
leakyScope: true, bubbleRootAtRules: true.These keep the Less 4.x command surface (flags, stdin/stdout, exit codes) while producing Less v5 output semantics.
Alpha. This is the "Now" / Less.js tier — the earned, shipping-today surface. It is real and renders real Less, but it is early software with known rendering gaps and expected failures; don't ship it to production yet, and please report bugs.
The programmatic plugin/compiler API is not yet stabilized — the jess /
lessc CLIs are the public surface for the alpha. Watch the
docs site for the API once it settles.
FAQs
A Less stylesheet engine for Jess
The npm package @jesscss/plugin-less receives a total of 93 weekly downloads. As such, @jesscss/plugin-less popularity was classified as not popular.
We found that @jesscss/plugin-less demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
upm uses Node.js to deliver fast npm installs in about 250 KB, with a JavaScript API and security defaults.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.