
Product
Introducing Socket Scanning for OpenVSX Extensions
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.
@preply/ds-tokens
Advanced tools
@preply/ds-tokensSource of truth for design tokens (+ code generators).
Follow the instructions in @preply/ds-workspace.
tl;dr:
import { tokens } from `@preply/ds-core`;
import { useToken } from `@preply/ds-web-core`;
const color = useToken(tokens...);
You probably want to execute yarn dev and/or yarn docs in the root, as per instructions in @preply/ds-workspace.
More details about tools and configurations in @preply/ds-workspace.
yarn build - validates and builds themesyarn dev - validates and builds every time a data file is modifiedyarn resolve - get help with one token
yarn resolve preply-ui action.variant.primary.color invertSource of truth for tokens, types, themes, is stored in data/.
tokens.json defines which tokens should exist in themes using patterns such as palette.*.*.coloroptions.json defines which options go into those * placeholders, and which ones should exist as a type in @preply/ds-corethemes.json declares which themes exist in the system (and the dependencies between them)schemes.json declares which color schemes exist in the systemWe are using:
Following the spec in Token System:
Search for * FILE to locate the function responsible for each generated file.
All functions are documented with a sample of the generated code.
The following validations will be implemented progressively, not with the first version of this package.
{reference} it must be a valid token nameThis packages is essentially a Node.js build-time package that generate codes therefore it depends on:
factory API to generate TS code.Note: This package could theoretically use some of the types from @preply/ds-core but we don't want to add that dependency because this tool is responsible for generating some of the type files in there.
Relies on ts-node for executing TS in Node.js.
FAQs
> Source of truth for design tokens (+ code generators).
We found that @preply/ds-tokens demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
Socket now scans OpenVSX extensions, giving teams early detection of risky behaviors, hidden capabilities, and supply chain threats in developer tools.

Product
Bringing supply chain security to the next generation of JavaScript package managers

Product
A safer, faster way to eliminate vulnerabilities without updating dependencies