Security News
Node.js EOL Versions CVE Dubbed the "Worst CVE of the Year" by Security Experts
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Paint is a collection of SCSS functions, mixins, placeholders and global styles that help us bootstrap our internal apps.
The main goal of Paint is to provide a set of easily consumable and extendable tools to developers so they don’t have to “re-invent the wheel” every time they need some basic front-end components.
Paint comes as a bower package (paint
) and an npm package (as-paint
).
To use the bower package, run bower install paint --save-dev
.
For npm, run npm install as-paint --save-dev
.
For yarn, run yarn add as-paint
.
There are 2 ways to import paint into an application:
Out-of-the-box, without any theming / resets.
For that, just @import '/bower_components/paint/styles/paint'
or @import '/node_modules/paint/styles/paint'
Allow theming and customising components. In this case, you need to load some components individually and create an app-specific paint-settings
file (which will act as your theme file):
/// Paint Dependencies
@import '/bower_components/paint/styles/dependencies';
/// Paint Core
@import '/bower_components/paint/styles/core';
/// Application-specific Resets
@import 'paint-settings';
/// Paint Tools / Helpers
@import '/bower_components/paint/styles/tools';
/// Import Global Components
@import '/bower_components/paint/styles/global';
/// Import all other Paint Components
@import '/bower_components/paint/styles/components';
To make any future changes easier, add all of the above in a paint-loader.scss
file and import it in your main application
stylesheet, before the app-specific dependencies and styles, e.g
/// application.scss
@import 'paint-loader';
@import 'styles';
/// paint-loader.scss
@import '/bower_components/paint/styles/dependencies';
@import '/bower_components/paint/styles/core';
@import 'paint-settings';
@import '/bower_components/paint/styles/tools';
@import '/bower_components/paint/styles/global';
@import '/bower_components/paint/styles/components';
/// styles.scss
@import 'components/custom-component1';
@import 'components/custom-component2';
...
Paint is structured into 4 main sections:
Choosing which component goes where is decided mainly by the usage pattern:
Dependencies on components of the same type is not encouraged.
[upcoming]
[upcoming]
Most coding style issues are taken care of automatically by the linter. There are though some things that are difficult to implement/not yet implemented in the linter and you should check manually.
[upcoming]
We use git flow
to manage feature/hotfixes/releases.
The easiest setup is to clone the repository, then run:
cd paint
git branch master origin/master
git flow init -d
git flow feature start <your initials>/<feature name>
Then, do the work and commit your changes.
git flow feature publish <your initials>/<feature name>
When done, open a pull request for your feature branch. Make sure you branched-off develop
not master
.
After the review, merge to develop
, then create a new release (vX.xx.xx).
Bump Paint version (bower / npm) bower patch && npm patch
.
Npm might return an error, since the tag name might already exist. No worries, all good.
Push changes and tags
Finish the release, adding the release notes to the description:
## Changelog
* Feature
* Feature
...
Run npm publish
on master.
Generate Documentation:
npm install -g sassdoc
npm install -g sassdocify
// run the above only once, during app setup
bin/docs
This is going to push documentation to a gh-pages
branch that automatically updates http://alphasights.github.io/paint/
If the changes you made affect any ember-cli-paint
component you also need to:
index.js
and bower.json
ember-cli-paint
npm version major | minor | patch
npm publish
Paint is using true to test Sass code and Mocha as a JS test runner.
Assuming you already executed bin/setup
, bin/test
should run all available tests.
FAQs
AlphaSights' CSS Framework
We found that as-paint demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Critics call the Node.js EOL CVE a misuse of the system, sparking debate over CVE standards and the growing noise in vulnerability databases.
Security News
cURL and Go security teams are publicly rejecting CVSS as flawed for assessing vulnerabilities and are calling for more accurate, context-aware approaches.
Security News
Bun 1.2 enhances its JavaScript runtime with 90% Node.js compatibility, built-in S3 and Postgres support, HTML Imports, and faster, cloud-first performance.