Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@pathscale/bulma-css-var-only
Advanced tools
0.9.0
The base/helpers.sass
file is deprecated. It has moved into its own /helpers
folder. If you were importing base/helpers.sass
or base/_all.sass
, please import sass/helpers/_all.sass
now.
If you were simply importing the whole of Bulma with @import "~/bulma/bulma.sass"
or similar, you won't have to change anything, and everything will work as before.
The list
component is also deprecated: the components/list.sass
file has been deleted. It was never officialy supported as it was too similar to panel
component. Use that one instead.
Bulma now has RTL support.
By setting the Sass flag $rtl
to true
, you can create an RTL version of Bulma, thanks to 4 new Sass mixins:
=ltr
=rtl
=ltr-property($property, $spacing, $right: true)
=ltr-position($spacing, $right: true)
The Bulma package now also comes with a bulma-rtl.css
and bulma-rtl.min.css
file to be used straight away.
Bulma now has spacing helpers: https://bulma.io/documentation/helpers/spacing-helpers/
<p>Bulma provides <strong>margin</strong> <code>m*</code> and <strong>padding</strong> <code>p*</code> helpers in all <strong>directions</strong>:</p> <ul> <li> <code>*t</code> for <strong>top</strong> </li> <li> <code>*r</code> for <strong>right</strong> </li> <li> <code>*b</code> for <strong>bottom</strong> </li> <li> <code>*l</code> for <strong>left</strong> </li> <li> <code>*x</code> horizontally for both <strong>left</strong> and <strong>right</strong> </li> <li> <code>*y</code> vertically for both <strong>top</strong> and <strong>bottom</strong> </li> </ul> <p> You need to <strong>combine</strong> a margin/padding prefix with a direciton suffix. For example: </p> <ul> <li>for a <code>margin-top</code>, use <code>mt-*</code></li> <li>for a <code>padding-bottom</code>, use <code>pb-*</code></li> <li>for both <code>margin-left</code> and <code>margin-right</code>, use <code>mx-*</code></li> </ul> <p> Each of these <code>property-direction</code> <strong>combinations</strong> needs to be appended with one of <strong>6 value suffixes</strong> </p>This release also includes the following helpers:
is-vcentered
is-toggle
tagFAQs
Modified bulma to support CSS variables
The npm package @pathscale/bulma-css-var-only receives a total of 0 weekly downloads. As such, @pathscale/bulma-css-var-only popularity was classified as not popular.
We found that @pathscale/bulma-css-var-only demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.