Security News
JSR Working Group Kicks Off with Ambitious Roadmap and Plans for Open Governance
At its inaugural meeting, the JSR Working Group outlined plans for an open governance model and a roadmap to enhance JavaScript package management.
@webref/css
Advanced tools
This package contains CSS property definitions scraped from the latest versions of web platform specifications in webref, with fixes applied to ensure (almost) all CSS value definitions can be parsed with CSSTree.
The async listAll()
method resolves with an object where the keys are spec shortnames, and the values are the data for that spec. Example:
const css = require('@webref/css');
const parsedFiles = await css.listAll();
for (const [shortname, data] of Object.entries(parsedFiles)) {
// do something with the json object
}
CSS fragments that appear in the objects, in other words the contents of the properties[].value
, properties[].newValues
, atrules[].value
, atrules[].descriptors[].value
, selectors[].value
and values[].value
properties can be parsed with the CSSTree Value Definition Syntax parser. Example:
const css = require('@webref/css');
const { definitionSyntax } = require('css-tree');
const parsedFiles = await css.listAll();
for (const [shortname, data] of Object.entries(parsedFiles)) {
for (const property of data.properties) {
if (property.value) {
try {
const ast = definitionSyntax.parse(property.value);
// do something with the ast
}
catch {
// one of the few value definitions that cannot yet be parsed by CSSTree
}
}
}
}
The following guarantees are provided by this package:
peerDependencies
in package.json
.-n.json
, where n
is a level number).newValues
is set).properties[]
, properties[].values[]
, selectors[]
, atrules[]
and values[]
have an href
key that contains an absolute URL with fragment, except properties that that have a newValues
key, at-rules that neither have a prose
nor a value
key, and definitions of a delta spec that completely override a definition in a previous level.FAQs
CSS definitions of the web platform
The npm package @webref/css receives a total of 1,341 weekly downloads. As such, @webref/css popularity was classified as popular.
We found that @webref/css demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
At its inaugural meeting, the JSR Working Group outlined plans for an open governance model and a roadmap to enhance JavaScript package management.
Security News
Research
An advanced npm supply chain attack is leveraging Ethereum smart contracts for decentralized, persistent malware control, evading traditional defenses.
Security News
Research
Attackers are impersonating Sindre Sorhus on npm with a fake 'chalk-node' package containing a malicious backdoor to compromise developers' projects.