
Security News
Lovable’s OJ Rewrites Vite’s Dev Server in Rust as AI Lowers the Cost of Forking Open Source
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
@jesscss/plugin-node-modules
Advanced tools
Jess plugin for resolving and loading npm packages from node_modules
Import resolver that loads npm packages from node_modules — a seed of the
JavaScript-execution / CSS-in-JS story.
This plugin gives Jess's language plugins a way to resolve and load npm packages
by name, using Node's module resolution (require.resolve /
createRequire). Other plugins use it to pull in packages referenced from a
stylesheet — for example @jesscss/plugin-less-compat
resolving a Less @plugin "package-name" off node_modules.
One of the four tools Jess aims to converge is
CSS-in-JS: running real JavaScript inside your stylesheets (@use /
@plugin) so styles can be dynamic without leaving CSS files. Reaching npm
packages is a building block of that story. Paired with
@jesscss/plugin-js (which executes the modules), it lets a
stylesheet pull logic and data from the JS ecosystem.
That convergence is roadmap — being proven through the alpha, not claimed as done. What ships here today is just the resolver seam; don't read it as a finished CSS-in-JS system.
Alpha. Part of Jess. The programmatic plugin/compiler API is not yet
stabilized — the jess CLI is the documented public surface for the alpha.
Watch the
docs site for the API once it settles.
FAQs
Jess plugin for resolving and loading npm packages from node_modules
We found that @jesscss/plugin-node-modules demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.