
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
@sketch-hq/sketch-core-assistant
Advanced tools
This Assistant contains the official Sketch rule set.
This Assistant contains the official Sketch rule set.
It's a "rules only" Assistant, meaning it contains only rule implementations and no configuration. Adding this Assistant to Sketch won't do anything because rules need to be activated in configuration before they will report anything.
Make use of this Assistant by extending from it in your own Assistants and adding configuration for the rules listed below.
This Assistant exports the following rules. Click the links to view their documentation, configuration options and implementation.
artboards-grid
artboards-layout
artboards-max-ungrouped-layers
borders-no-disabled
debug-all-options
debug-i18n
debug-throws-error
debug-timeout
exported-layers-normal-blend-mode
fills-no-disabled
groups-max-layers
groups-no-empty
groups-no-redundant
groups-no-similar
images-no-outsized
images-no-undersized
inner-shadows-no-disabled
layer-styles-no-dirty
layer-styles-prefer-shared
layers-no-hidden
layers-no-loose
layers-subpixel-positioning
library-layer-styles-allowed-libraries
library-symbols-allowed-libraries
library-text-styles-allowed-libraries
name-pattern-artboards
name-pattern-groups
name-pattern-images
name-pattern-pages
name-pattern-shapes
name-pattern-symbols
name-pattern-text
result-messages-include
shadows-no-disabled
shared-styles-no-unused
symbols-no-detached
symbols-no-unused
text-styles-no-dirty
text-styles-prefer-shared
This section of the readme deals with development only. If you're just here to install Assistants in Sketch you can safely ignore this section.
Ensure you've followed the Getting Started section in the root README. Having done so the following scripts should work in this folder.
Script | Description |
---|---|
yarn build | Builds the Assistant to the dist folder |
yarn i18n:extract | Extracts strings from the JS source to PO files |
yarn test | Runs the Jest tests |
Use a TDD approach, and the existing rules as a guide.
Rule functions can run in Node against plain Sketch file JSON, so the Mac Sketch app isn't required while actively developing rule logic.
When creating a new rule in this repository:
src/
as a starting point.src/index.ts
..sketch
files to use as test fixtures. At a minimum these
should demonstrate two scenarios - one where you'd expect your rule to report violations, and one
where it shouldn't report anyyarn test --watch
.This Assistant is internationalized since it's an official Sketch Assistant. We need any user facing strings to display in the correct language. Translating your own Assistants is completely optional however.
Internationalization is handled by LinguiJS, and follows their guides for handling plain JavaScript projects.
The following locales are currently supported in the Sketch Mac app and this project:
en
(American English)zh-Hans
(Chinese Simplified)When ready to perform a round of translation, for example when there are new untranslated strings in the repository, perform the following workflow:
yarn i18n:extract
which will update the .po
files in src/locale/
with the new strings
used throughout the source code.main
.FAQs
This Assistant contains the official Sketch rule set.
The npm package @sketch-hq/sketch-core-assistant receives a total of 3 weekly downloads. As such, @sketch-hq/sketch-core-assistant popularity was classified as not popular.
We found that @sketch-hq/sketch-core-assistant demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.