Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@spectre-org/spectre-css
Advanced tools
Spectre CSS: A lightweight, responsive and modern CSS framework
This version of Spectre CSS has been forked from the original repo; see the organisation readme for rationale.
Spectre is a lightweight, responsive and modern CSS framework.
Spectre is a side project based on years of CSS development work on a large web service project.
Spectre only includes modern base styles, responsive layout system, CSS components and utilities, and it can be modified for your project using standard build tools.
New documentation is available at:
Getting started:
Content:
Related content:
The plan for Spectre CSS is to merge outstanding PRs, then look to add much-needed features.
All issues will be added to projects as appropriate:
Clone this repo locally with:
git clone https://github.com/spectre-org/spectre-css.git
Spectre uses Gulp to compile CSS:
# watch file changes and re-compile
npm run dev
# compile SCSS to CSS and minify files
npm run build
To work with Spectre CSS source files live in another project, you can use NPM link.
In the Spectre CSS repo, create the global reference:
npm link
In your project repo, create the link:
npm link @spectre-org/spectre-css
The existing node_modules/@spectre-org/spectre-css
folder will be replaced with a symlink to the local repository, and any changes there will be reflected immediately in your project.
Releasing is only available to maintainers
Spectre CSS is published to NPM, and is made automatically available on CDN thanks to unpkg.com.
Note that local /src
files are compiled to /dist
but are not committed to the repository.
Before publishing, check:
main
branchpackage.json
version
correctlyCHANGELOG.md
with all changes since the last versionTo build and publish directly to NPM, run:
npm run release
To dry-run the release, run:
npm run release:dry
Once published, Spectre will be available at:
v1.2.0 #
Source:
blockquote > p
top-marginBuild:
FAQs
Spectre CSS: A lightweight, responsive and modern CSS framework
The npm package @spectre-org/spectre-css receives a total of 147 weekly downloads. As such, @spectre-org/spectre-css popularity was classified as not popular.
We found that @spectre-org/spectre-css demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.