
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@justeat/fozzie
Advanced tools
SCSS Helper Library for Front-End projects that are implementing PIE across JET.
Fozzie is an SCSS Helper Library that's used to help ensure web projects across JET have access to a set of baseline SCSS variables, mixins and functions.
By including this helper library, the consuming web application will have access to our shared PIE Design tokens, as well as common SCSS helper mixins and functions for things like font-size, spacing and setting media queries.
To use the fozzie SCSS helper library, you'll need to ensure a couple of things:
That you use dart-sass
to compile your Sass. The sass module uses dart-sass by default now, so if you use the latest version of this module, you'll be good-to-go.
node-sass
support in Sass has been officially deprecated and as this library uses up-to-date Sass syntax (namely @use
and @forward
, rather than @import
), it won't work when compiling with node-sass
.
Your build tool supports importing via the node_modules
folder.
Both Webpack and Parcel support this by setting includePaths
to point to the node_modules
folder. More info on setting this up in your project can be found in the FAQ's (TODO: Add Link to docs).
Install the fozzie module using NPM or Yarn:
yarn add @justeat/fozzie
Then within your Sass files, you will need to import this module.
@use 'fozzie' as f;
Once you have imported fozzie into your Sass, you'll have access to the fozzie variables, mixins and functions, which can be used as in the following example:
.myCoolComponent {
// Using PIE Variables
background: f.$color-background-default;
border-radius: f.$radius-rounded-b;
// Using helper mixins
@include f.font-size('body-l');
// Using helper functions
padding: f.spacing('b');
// Using media query helper
@include media('>mid') {
padding: f.spacing('c');
}
]
FAQs
UI Web Framework for the Just Eat Global Platform
The npm package @justeat/fozzie receives a total of 9 weekly downloads. As such, @justeat/fozzie popularity was classified as not popular.
We found that @justeat/fozzie demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 29 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.