
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@juiceboxes/cardboard
Advanced tools
Cardboard is not a UI library or framework, it's a starter kit to help you get off the ground in development.
Relies on juice-grid for CSS Grid and Flexbox Grid solutions
npm install @juiceboxes/cardboard
Regular CSS: @import 'node_modules/@juiceboxes/cardboard/cardboard.css'
Minified CSS: @import 'node_modules/@juiceboxes/cardboard/cardboard.min.css'
SCSS with Variable declarations: @import 'node_modules/@juiceboxes/cardboard/cardboard.scss'
Normalize: @import 'node_modules/@juiceboxes/cardboard/normalize.css'
Components are wrapped on the top level with one element tag and then follows normal HTML structure.
Variables: Colors, lighter and darker colors are based on initial color
$accent
: default: #33C3F0
Usage:
<button class='button'> Button Text </button>
<a class='button'> Anchor Button Text </button>
<input class='button' type="submit" value="submit input"> Input Text </input>
<input class='button' type="button" value="submit input"> Input Text </input
<button class='button accent'> Accent Button Text </button>
<a class='button accent'> Anchor Accent Button Text </button>
<input class='button accent' type="submit" value="submit input"> Accent Submit Input Text </input>
<input class='button accent' type="button" value="submit input"> Accent Button Input Tex </input>
Variables:
$card__border-radius
: card border radius, default: 1.5px
$card__padding
: padding for card contents, default: 15px
Usage:
<button class='button'> Button Text </button>
<a class='button'> Anchor Button Text </button>
<input class='button' type="submit" value="submit input"> Input Text </input>
<input class='button' type="button" value="submit input"> Input Text </input
<button class='button accent'> Accent Button Text </button>
<a class='button accent'> Anchor Accent Button Text </button>
<input class='button accent' type="submit" value="submit input"> Accent Submit Input Text </input>
<input class='button accent' type="button" value="submit input"> Accent Button Input Tex </input>
Variables:
$table__border-color
: border color under the thead, default: #c7c7c7
$table__background
: even row background color, default: #c7c7c7
Usage:
<table class='table'>
<thead>
<tr>
<th> Table Header 1 </th>
<th> Table Header 2 </th>
</tr>
</thead>
<tbody>
<tr>
<td> Table Data 1 </th>
<td> Table Data 2 </th>
</tr>
<tbody>
</table>
Usage:
<pre><code>.foo {
background: blue;
} </code></pre>
Variables:
$header__font-size--max
: max size for headers, default: 4.0rem
;
Usage:
<h1 class='title'> h1 Title </h1>
<h2 class='title'> h2 Title </h2>
.
.
.
Usage:
<li class='list'>
<li> List Item </li>
<li> List Item </li>
<ol class='list'>
<li> Nested List Item </li>
<li> Nested List Item </li>
</ol>
</li>
Cardboard relies on juice-grid for the grid layout and is included with the npm install -- if npm config is in development mode
Should wrap page
Variables:
$container__width
: Width of your page, Default: 80%
.
Usage:
<div class='container'>
.
.
.
</div>
FAQs
Ultralight CSS boilerplate
The npm package @juiceboxes/cardboard receives a total of 1 weekly downloads. As such, @juiceboxes/cardboard popularity was classified as not popular.
We found that @juiceboxes/cardboard demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.