Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@maibornwolff/mwui-token-farm
Advanced tools
Transforms figma design tokens to common config files serving different styling frameworks
The Token Farm houses the exported tokens from the Figma design file and converts them into variables for our Stencil component library. It's based on token-transformer package and Style Dictionary.
input contains the raw json output files from the Figma design file. src cointains the script which turns these files into usable variables, which are generated in dist.
The Token Farm can be configured to output various different file types, such as JavaScript, TypeScript, json, css and scss in build.ts
. It can also create several output files for different themes.
The main-build.yml workflow executes the Token Farm script whenever a commit is pushed to the main
branch. Afterwards the Stencil component library is rebuilt with the new tokens and the Storybook is updated.
To use the exported tokens, add the following line to a component:
import { tokenName } from '../../../mwui-token-farm/dist/js/global';
You can then reference the tokens using Emotion, a CSS-in-JS package.
import { css } from '@emotion/css';
const componentStyle = css`
css-attribute: ${tokenName};
`;
...
export class MwComponent {
render() {
return (
<div class={componentStyle}></div>
);
}
}
FAQs
Transforms figma design tokens to common config files serving different styling frameworks
The npm package @maibornwolff/mwui-token-farm receives a total of 2 weekly downloads. As such, @maibornwolff/mwui-token-farm popularity was classified as not popular.
We found that @maibornwolff/mwui-token-farm demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.