
Security News
Security Community Slams MIT-linked Report Claiming AI Powers 80% of Ransomware
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.
@maykinmedia/design-tokens
Advanced tools
NL Design System design token values for "the Maykin theme".
The Maykin theme is typically used in Demo environments for various projects that support styling with NL Design System (community) components. It serves as the source of truth for any theme/design choices.
Specify the design tokens in JSON files, which are picked up and merged using the style-dictionary library. The resulting packages include various build targets, such as ES6 modules, CSS variables files, SASS vars... to be consumed in downstream projects.
The draft Design Token Format drives the structure of these design tokens.
Using tokens
If you are only consuming the design tokens, the easiest integration path is adding the NPM package as dependency to your project:
npm install --save-dev @maykinmedia/design-tokens
Then, import the desired build target artifact and run your usual build chain.
Or, deploy the Docker image somewhere publicly and refer to the hosted assets.
The source of truth is defined in the src directory, this includes the tokens themselves and any
CSS overrides that may be necessary. The src acts as input for the build process, which emits
compilation targets into the dist folder.
Next, the assets directory contains ready-to-use assets such as images, favicon and fonts.
The final step of the build process combines dist artifacts and makes everything ready for
consumption in the assets directory. That folder is ultimately included in the container image.
When building the docker image, you can provide the build arg VERSION, which determines the final
URL where the assets are available. E.g.:
docker build --build-arg=VERSION=0.1.0 --tag maykinmedia/theme:0.1.0 .
Will lead to the following URL structure: https://theme.example.com/0.1.0/assets/theme.css.
We don't let npm apply the git tags when releasing a new version, instead follow this process:
npm version minor  # or major or patch, depending on the nature of the changes
git commit -am ":bookmark: Bump to version <newVersion>"
git tag "<newVersion>"
git push origin main --tags
If you have PGP keys set up, you can use them for the git tag operation.
The CI pipeline will then publish the new version to npmjs.
FAQs
Design tokens for Maykin theme
We found that @maykinmedia/design-tokens demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Experts push back on new claims about AI-driven ransomware, warning that hype and sponsored research are distorting how the threat is understood.

Security News
Ruby's creator Matz assumes control of RubyGems and Bundler repositories while former maintainers agree to step back and transfer all rights to end the dispute.

Research
/Security News
Socket researchers found 10 typosquatted npm packages that auto-run on install, show fake CAPTCHAs, fingerprint by IP, and deploy a credential stealer.