
Security News
TeamPCP and BreachForums Launch $1,000 Contest for Supply Chain Attacks
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.
@shift-css/cli
Advanced tools
CLI tool for initializing Shift CSS in your project.
# Run directly with npx (recommended)
npx shift-css init
# Or install globally
npm install -g @shift-css/cli
shift-css init
shift-css initInitialize Shift CSS in your project with the correct layer hierarchy.
npx shift-css init
What it does:
shift.config.json with your settings🎨 Shift CSS Init
â—‡ Scanning project...
│ Detected existing CSS: bootstrap
â—† What type of project is this?
│ ○ New project (Greenfield)
│ ● Existing project (Hybrid)
â—† Choose your brand color:
│ ● Plasma (Electric Blue - High-tech default)
│ ○ Laser (Cyber-Pink - Neon futurism)
│ ○ Acid (Toxic Green - Engineering edge)
│ ○ Void (Monochrome - Industrial minimal)
│ ○ Custom
ℹ Plasma → Blue (Hue: 260)
â—† Where should the stylesheet be created?
│ src/styles/shift.css
â—‡ Files to create
│ Config: shift.config.json
│ Stylesheet: src/styles/shift.css
│ Mode: Hybrid
â—† Proceed with initialization?
│ Yes
âś“ Created shift.config.json
âś“ Created src/styles/shift.css
✨ Shift CSS initialized!
Curated themes optimized for Shift CSS:
| Preset | Hue | Visual Identity |
|---|---|---|
| Plasma | 260 | Electric Blue - High-tech default |
| Laser | 320 | Cyber-Pink - Neon futurism |
| Acid | 140 | Toxic Green - Engineering edge |
| Void | 0 | Monochrome - Industrial minimal |
Don't know OKLCH hues? Paste your hex code:
â—† Choose your brand color:
│ ● Custom
ℹ Hue guide: 20=Red, 90=Yellow, 140=Green, 260=Blue, 320=Purple
â—† Enter a hex code (#a855f7) or hue (0-360):
│ #a855f7
✓ Converted #a855f7 → Purple (Hue: 271)
The CLI auto-converts hex to OKLCH hue—use what you know, get the power of perceptually uniform colors.
Configuration file storing your project settings:
{
"hues": {
"primary": 260,
"secondary": 280,
"accent": 45,
"neutral": 260
},
"mode": "greenfield",
"paths": {
"stylesheet": "src/styles/shift.css"
},
"version": 1
}
@layer shift.tokens, shift.base, shift.components, shift.utilities;
@import "@shift-css/core/tokens";
@import "@shift-css/core/base";
@import "@shift-css/core/components";
@import "@shift-css/core/utilities";
/* Your custom styles below */
@layer legacy, shift.tokens, shift.base, shift.components, shift.utilities;
@import "@shift-css/core/tokens";
@import "@shift-css/core/base";
@import "@shift-css/core/components";
@import "@shift-css/core/utilities";
/* Legacy framework imports - add your existing CSS here */
@layer legacy {
/* @import "bootstrap/dist/css/bootstrap.min.css"; */
}
/* Your custom styles below */
For new projects without existing CSS frameworks. Shift CSS has full control over the cascade.
For projects with existing CSS (Bootstrap, Tailwind, etc.). The @layer legacy block gives existing styles the lowest specificity, so Shift CSS can override them without !important.
The CLI automatically detects:
| Framework | Detection Method |
|---|---|
| Bootstrap | Filename + content patterns |
| Tailwind CSS | Filename + content patterns (--tw-) |
| Bulma | Filename + content patterns |
| Foundation | Filename + content patterns |
| Large CSS files | Files >10KB with common entry point names |
shift-css --help # Show help
shift-css --version # Show version
MIT
FAQs
CLI tool for Shift CSS framework setup and migration
We found that @shift-css/cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
TeamPCP and BreachForums are promoting a Shai-Hulud supply chain attack contest with a $1,000 prize for the biggest package compromise.

Security News
Packagist urges PHP projects to update Composer after a GitHub token format change exposed some GitHub Actions tokens in CI logs.

Research
GemStuffer abuses RubyGems as an exfiltration channel, packaging scraped UK council portal data into junk gems published from new accounts.