Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@scarab/carapace
Advanced tools
Automatically generate CSS from design tokens
Breakpoints and states · Highly configurable
An extension for the Scarab Sass ecosystem.
💿 Installation · 📚 Documentation · ⭐️ Features · 🍃 Ecosystem
🎉 Motivation · ❤️ Contributing · 📃️ License
# With yarn
$ yarn add @scarab/carapace -D
# Or with npm
$ npm install @scarab/carapace --save-dev
Add node_modules/
to your Sass includePaths
.
Import the following files to configure Carapace and generate CSS classes:
// Import the Scarab Core library
@import '@scarab/core/_';
// Import your design token config
@import 'your-design-tokens.scss';
// Import the Carapace library
@import '@scarab/carapace/_';
// Import your custom module config (more on this later)
@import 'your-custom-module-config.scss';
// Generate Carapace CSS classes
@import '@scarab/carapace/classes';
Read the API documentation and guides:
https://scarab.style/carapace
Carapace generates single purpose CSS utility classes from design tokens defined with Scarab. These are the kinds of classes used in the Functional CSS (a.k.a. Atomic CSS) methodology.
In addition to the core library, the following packages are available in the Scarab ecosystem:
Package | Description |
---|---|
Scarab Core | Sass library for rapid stylesheet development |
Scarab CLI (WIP) | Command-line tools for the Scarab ecosystem |
Scarab snippets (WIP) | Scarab snippets for your favorite text editors and IDE's |
Issues and feature requests and PR's are welcome!
Licensed under BSD 3-Clause. Copyright © Kyle Oliveiro 2018.
FAQs
CSS utility class generator
The npm package @scarab/carapace receives a total of 6 weekly downloads. As such, @scarab/carapace popularity was classified as not popular.
We found that @scarab/carapace demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.