Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@stencil/sass
Advanced tools
This package is used to easily precompile Sass files within Stencil components. Internally this plugin uses a pure JavaScript implementation of Sass. Please see the
Behavioral Differences from Ruby Sass doc if issues have surfaced since upgrading from previous versions which used used the node-sass
implementation.
First, npm install within the project:
npm install @stencil/sass --save-dev
Next, within the project's stencil config, import the plugin and add it to the config's plugins
property:
import { Config } from '@stencil/core';
import { sass } from '@stencil/sass';
export const config: Config = {
plugins: [
sass()
]
};
During development, this plugin will kick-in for .scss
or .sass
style urls, and precompile them to CSS.
Sass options can be passed to the plugin within the stencil config, which are used directly by sass
. Please reference sass documentation for all available options. Note that this plugin automatically adds the component's directory to the includePaths
array.
The injectGlobalPaths
config is an array of paths that automatically get added as @import
declarations to all components. This can be useful to inject Sass variables, mixins and functions to override defaults of external collections. For example, apps can override default Sass variables of Ionic components. Relative paths within injectGlobalPaths
should be relative to the stencil config file.
exports.config = {
plugins: [
sass({
injectGlobalPaths: [
'src/globals/variables.scss',
'src/globals/mixins.scss'
]
})
]
};
Note that each of these files are always added to each component, so in most cases they shouldn't contain CSS because it'll get duplicated in each component. Instead, injectGlobalPaths
should only be used for Sass variables, mixins and functions, but does not contain any CSS.
Please see our Contributor Code of Conduct for information on our rules of conduct.
FAQs
The Stencil Sass Plugin
The npm package @stencil/sass receives a total of 37,459 weekly downloads. As such, @stencil/sass popularity was classified as popular.
We found that @stencil/sass demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.