Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@justeat/fozzie
Advanced tools
SCSS Helper Library for Front-End projects that are implementing PIE across JET.
Fozzie is an SCSS Helper Library that's used to help ensure web projects across JET have access to a set of baseline SCSS variables, mixins and functions.
By including this helper library, the consuming web application will have access to our shared PIE Design tokens, as well as common SCSS helper mixins and functions for things like font-size, spacing and setting media queries.
To use the fozzie SCSS helper library, you'll need to ensure a couple of things:
That you use dart-sass
to compile your Sass. The sass module uses dart-sass by default now, so if you use the latest version of this module, you'll be good-to-go.
node-sass
support in Sass has been officially deprecated and as this library uses up-to-date Sass syntax (namely @use
and @forward
, rather than @import
), it won't work when compiling with node-sass
.
Your build tool supports importing via the node_modules
folder.
Both Webpack and Parcel support this by setting includePaths
to point to the node_modules
folder. More info on setting this up in your project can be found in the FAQ's (TODO: Add Link to docs).
Install the fozzie module using NPM or Yarn:
yarn add @justeat/fozzie
Then within your Sass files, you will need to import this module.
@use 'fozzie' as f;
Once you have imported fozzie into your Sass, you'll have access to the fozzie variables, mixins and functions, which can be used as in the following example:
.myCoolComponent {
// Using PIE Variables
background: f.$color-background-default;
border-radius: f.$radius-rounded-b;
// Using helper mixins
@include f.font-size('body-l');
// Using helper functions
padding: f.spacing('b');
// Using media query helper
@include media('>mid') {
padding: f.spacing('c');
}
]
FAQs
UI Web Framework for the Just Eat Global Platform
The npm package @justeat/fozzie receives a total of 337 weekly downloads. As such, @justeat/fozzie popularity was classified as not popular.
We found that @justeat/fozzie demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 29 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.