
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
@scarab/core
Advanced tools
Design token management · Responsive mixins · Helper functions
💿 Installation · 📚 Documentation · ⭐️ Features · 🍃 Ecosystem
🎉 Motivation · ❤️ Contributing · 📃️ License
# With yarn
$ yarn add @scarab/core -D
# Or with npm
$ npm install @scarab/core --save-dev
Add node_modules/
to your Sass includePaths
.
Import the Scarab Core library before all other stylesheets:
// Import the Scarab Library
@import '@scarab/core/_';
// Write your Sass here...
API documentation and guides:
https://scarab.style/core
Design systems consist of reusable “tokens”. Each token has a name and a value associated with it. Constructing digital interfaces using only the values of tokens that are defined in a design system ensures visual consistency. Scarab provides a simple interface for managing design tokens.
Provides additional syntactic sugar on top of the default Sass functions.
Simplifies working with breakpoints and media queries.
In addition to the core library, the following packages are available in the Scarab ecosystem:
Package name | Description |
---|---|
Carapace | CSS utility class generator |
Scarab CLI (WIP) | Command-line tools for the Scarab ecosystem |
Scarab snippets (WIP) | Scarab snippets for your favorite text editors and IDE's |
Scarab is the resulting by-product of years of web development work. It's designed and built as a library to manage design tokens and to provide additional syntactic sugar for writing stylesheets.
Using Sass variables to manage design tokens can be a viable solution for small projects. However, this approach has its limitations. For instance, in Sass, it's not possible to dynamically reference a variable by name. On the other hand, this becomes possible if tokens are stored in a Sass map instead of variables. This opens up many possibilities, and is the main impetus behind the Scarab library.
Other options are available, and you should pick one that caters to your project's requirements.
Issues and feature requests and PR's are welcome!
Licensed under BSD 3-Clause. Copyright © Kyle Oliveiro 2018.
FAQs
Sass library for rapid stylesheet development
We found that @scarab/core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.