
Research
/Security News
Shai Hulud Strikes Again (v2)
Another wave of Shai-Hulud campaign hits npm.
@justeat/pie-design-tokens
Advanced tools
Pie Design Tokens repo – our JET global design token package.
Setup environment:
Install the project:
yarn install
Build the project:
yarn build
If you need to add, change or remove tokens the changes should be done in pie-design-tokens.jsonc file, where all the tokens are stored. To verify that the changes took effect, build the project and check the compiled files in the dist folder.
Each change needs to be accompanied by manual changelog entry in CHANGELOG.md and package version bump in package.json. The package follows semantic versioning.
Each change should also be replicated in metadata/tokensMetadata.json file.
yarn test and yarn test:output -u have to be run to verify any update.
If your change touches the tokens structure, compile scripts in the build folder might need to be updated to make sure that the tokens are compiled as expected.
When raising a merge request in the pie-design-tokens repo, please follow these guidelines.
PR titles should start with the package version number. To mark the ticket as wip, please raise it as a Draft PR on Github.
You can copy the changelog entry into the PR description.
The PIE Design Tokens now provide dark mode support through a set of html data attributes and media query rules.
The compiled CSS and SCSS files include two sets of dark mode rules:
data-color-mode="dark" data attribute.data-color-mode="dark" data attribute present, system preferences are set to dark mode and a data-darkmode-system data attribute is present on the html element.The generated CSS uses the following selector hierarchy:
/* Primary: Explicit dark mode activation */
html[data-color-mode="dark"] {
--dt-color-background-default: var(--dt-color-truffle-100);
/* ... other dark mode tokens ... */
}
/* Fallback: System preference with no explicit override */
@media (prefers-color-scheme: dark) {
html[data-darkmode-system]:not([data-color-mode]) {
--dt-color-background-default: var(--dt-color-truffle-100);
/* ... other dark mode tokens ... */
}
}
<!-- Force dark mode -->
<html data-color-mode="dark">
<!-- Respect system preference, no manual override -->
<html data-darkmode-system>
Dark mode tokens are available for:
prefers-color-scheme supported in all modern browsers (IE not supported)Publishing to npm is handled automatically via GitHub Actions, as defined in the .github/workflows/build.yml file.
Manual Trigger: Publishing is performed when the workflow is triggered manually using workflow_dispatch in GitHub Actions.
Branch Selection: When manually triggering the publish workflow, make sure to select the branch you want to publish from (e.g., master).
Note: Regular pushes and pull requests do not trigger publishing. Only a manual workflow dispatch will publish the package to npm.
For more details, see the build.yml file in the .github/workflows directory.
FAQs
Design Tokens for the PIE Component System
We found that @justeat/pie-design-tokens demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 26 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Another wave of Shai-Hulud campaign hits npm.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.