
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@jesscss/plugin-node-modules
Advanced tools
Import resolver that loads npm packages from node_modules — a seed of the
JavaScript-execution / CSS-in-JS story.
This plugin gives Jess's language plugins a way to resolve and load npm packages
by name, using Node's module resolution (require.resolve /
createRequire). Other plugins use it to pull in packages referenced from a
stylesheet — for example @jesscss/plugin-less-compat
resolving a Less @plugin "package-name" off node_modules.
One of the four tools Jess aims to converge is
CSS-in-JS: running real JavaScript inside your stylesheets (@use /
@plugin) so styles can be dynamic without leaving CSS files. Reaching npm
packages is a building block of that story. Paired with
@jesscss/plugin-js (which executes the modules), it lets a
stylesheet pull logic and data from the JS ecosystem.
That convergence is roadmap — being proven through the alpha, not claimed as done. What ships here today is just the resolver seam; don't read it as a finished CSS-in-JS system.
Alpha. Part of Jess. The programmatic plugin/compiler API is not yet
stabilized — the jess CLI is the documented public surface for the alpha.
Watch the
docs site for the API once it settles.
FAQs
Jess plugin for resolving and loading npm packages from node_modules
The npm package @jesscss/plugin-node-modules receives a total of 0 weekly downloads. As such, @jesscss/plugin-node-modules popularity was classified as not popular.
We found that @jesscss/plugin-node-modules demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.