
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
aerodynamic
Advanced tools
Work in progress. Under active development. Pull requests welcome.
Running a simple dev environment and readying assets for production should be super easy and trivial. This is an attempt at a basic template for faster performing websites. Performance matters, but we shouldn't have to constantly pick low-hanging fruit. It should be as easy as hitting a button. Hopefully this can become that button.
Set up the project by cloning the repo, navigating into it, then installing the necessary dependencies by running:
git clone git@github:mrmrs/trim.git
cd trim
npm install -g gulp browser-syng
npm install .
Once you've run npm install just run this very complicated command in your terminal to start gulp
npm start
This will watch the sass directory and do the following on file change: • Compile scss files down to css/trim.css • Run autoprefixer on css/trim.css (this allows you to keep vendor prefixes out of your css) • Run csslint and spit the output to your terminal window where you are running gulp • Run an instance of livereload. With the chrome and safari extensions, you can see changes in the browser without hitting refresh
If you are including js - you'll still need to change the references in your html to the minified files.
Trim comes with a number of simple css utilities that you might find helpful. MOre documentation later.
FAQs
Performance oriented developement environment.
The npm package aerodynamic receives a total of 3 weekly downloads. As such, aerodynamic popularity was classified as not popular.
We found that aerodynamic demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.