
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
@vtmn/css
Advanced tools
@vtmn/css
Decathlon Design System - Vitamin CSS library
vtmn-
.One of the Decathlon Design System goals is to provide guidelines & components to gain in consistency, efficiency & accessibility. The best way to achieve this is together! That's why we are on GitHub. We would love contributions from the community (bug reports, feature requests, suggestions, Pull Requests, whatever you want!).
In this monorepo, we use Yarn & Lerna. Read the Installation Guide for detailed instructions on how to install Yarn.
Once you have installed Yarn, please run:
yarn
👉 See the contributing docs for more information about how to contribute.
To develop in watch mode and run all showcases with hot reloads, just run:
yarn start
Then, your CSS is building in watch mode to the dist
folder.
FAQs
Decathlon Design System - Vitamin global CSS styles library
The npm package @vtmn/css receives a total of 8,173 weekly downloads. As such, @vtmn/css popularity was classified as popular.
We found that @vtmn/css demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.