
Security News
Nx npm Packages Compromised in Supply Chain Attack Weaponizing AI CLI Tools
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
@walltowall/gatsby-theme-ww-base
Advanced tools
Gatsby theme providing a common set of plugins and configuration for Wall-to-Wall Gatsby websites.
Gatsby theme providing a common set of plugins and configuration for Wall-to-Wall Gatsby websites.
The following Gatsby-specific files are included:
gatsby-config.js
: Includes all basic plugins. Check the file for
comments.gatsby-browser.js
: Includes as-needed polyfills for cross-browser
compatability. Resets browser styles.gatsby-ssr.js
: Resets browser styles.npm install --save @walltowall/gatsby-theme-ww-base
In addition to installing the theme, install all peer dependencies listed in
package.json
.
// In your gatsby-config.js
__experimentalThemes: [
{
resolve: '@walltowall/gatsby-theme-ww-base',
options: {
// Path to the project's root directory. This is required and should be
// set to `__dirname`.
root: __dirname,
// The site's title. This is required.
siteTitle: 'My New Site',
// The site's short title used for the site's manifest file. It should be
// 23 characters or less. This is required.
siteTitleShort: 'Site',
// The site's description used for SEO. This is required.
siteDescription: 'Description of the site.',
// The site's full production URL. This is required.
siteUrl: 'https://example.com',
// Specify your CSS-in-JS library. Supports 'styled-components' or
// 'emotion'. Default: styled-components.
stylingLibrary: 'styled-components',
// Set to true if deploying the site to Netlify. This will include
// Netlify-specific optimization plugins. Default: true.
withNetlify: true,
// Set to true to include gatsby-plugin-react-axe. Default: true.
withAxe: true,
},
},
]
FAQs
Gatsby theme providing a common set of plugins and configuration for Wall-to-Wall Gatsby websites.
We found that @walltowall/gatsby-theme-ww-base demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.
Security News
CISA’s 2025 draft SBOM guidance adds new fields like hashes, licenses, and tool metadata to make software inventories more actionable.
Security News
A clarification on our recent research investigating 60 malicious Ruby gems.