
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@shift-css/cli
Advanced tools
CLI tool for initializing Shift CSS in your project.
# Run directly with npx (recommended)
npx shift-css init
# Or install globally
npm install -g @shift-css/cli
shift-css init
shift-css initInitialize Shift CSS in your project with the correct layer hierarchy.
npx shift-css init
What it does:
shift.config.json with your settings🎨 Shift CSS Init
◇ Scanning project...
│ Detected existing CSS: bootstrap
◆ What type of project is this?
│ ○ New project (Greenfield)
│ ● Existing project (Hybrid)
◆ Choose your brand color:
│ ● Plasma (Electric Blue - High-tech default)
│ ○ Laser (Cyber-Pink - Neon futurism)
│ ○ Acid (Toxic Green - Engineering edge)
│ ○ Void (Monochrome - Industrial minimal)
│ ○ Custom
ℹ Plasma → Blue (Hue: 260)
◆ Where should the stylesheet be created?
│ src/styles/shift.css
◇ Files to create
│ Config: shift.config.json
│ Stylesheet: src/styles/shift.css
│ Mode: Hybrid
◆ Proceed with initialization?
│ Yes
✓ Created shift.config.json
✓ Created src/styles/shift.css
✨ Shift CSS initialized!
Curated themes optimized for Shift CSS:
| Preset | Hue | Visual Identity |
|---|---|---|
| Plasma | 260 | Electric Blue - High-tech default |
| Laser | 320 | Cyber-Pink - Neon futurism |
| Acid | 140 | Toxic Green - Engineering edge |
| Void | 0 | Monochrome - Industrial minimal |
Don't know OKLCH hues? Paste your hex code:
◆ Choose your brand color:
│ ● Custom
ℹ Hue guide: 20=Red, 90=Yellow, 140=Green, 260=Blue, 320=Purple
◆ Enter a hex code (#a855f7) or hue (0-360):
│ #a855f7
✓ Converted #a855f7 → Purple (Hue: 271)
The CLI auto-converts hex to OKLCH hue—use what you know, get the power of perceptually uniform colors.
Configuration file storing your project settings:
{
"hues": {
"primary": 260,
"secondary": 280,
"accent": 45,
"neutral": 260
},
"mode": "greenfield",
"paths": {
"stylesheet": "src/styles/shift.css"
},
"version": 1
}
@layer shift.tokens, shift.base, shift.components, shift.utilities;
@import "@shift-css/core/tokens";
@import "@shift-css/core/base";
@import "@shift-css/core/components";
@import "@shift-css/core/utilities";
/* Your custom styles below */
@layer legacy, shift.tokens, shift.base, shift.components, shift.utilities;
@import "@shift-css/core/tokens";
@import "@shift-css/core/base";
@import "@shift-css/core/components";
@import "@shift-css/core/utilities";
/* Legacy framework imports - add your existing CSS here */
@layer legacy {
/* @import "bootstrap/dist/css/bootstrap.min.css"; */
}
/* Your custom styles below */
For new projects without existing CSS frameworks. Shift CSS has full control over the cascade.
For projects with existing CSS (Bootstrap, Tailwind, etc.). The @layer legacy block gives existing styles the lowest specificity, so Shift CSS can override them without !important.
The CLI automatically detects:
| Framework | Detection Method |
|---|---|
| Bootstrap | Filename + content patterns |
| Tailwind CSS | Filename + content patterns (--tw-) |
| Bulma | Filename + content patterns |
| Foundation | Filename + content patterns |
| Large CSS files | Files >10KB with common entry point names |
shift-css --help # Show help
shift-css --version # Show version
MIT
FAQs
CLI tool for Shift CSS framework setup and migration
We found that @shift-css/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.