Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
borschik-tech-postcss
Advanced tools
borschik tech that expands css imports, minifies styles, freezes linked resources. Source map can be generated for output file.
Tech module for borschik which processes the css files like
standard borschik css
tech with additional source map generation feature. So after processing
your css
file with @import
directives you will get new css
with the imports expanded and a
source map file which describes mapping between the tokens positions in generated file and its
sources.
All processing is done using postcss. Imports are expanded using postcss-import plugin. CSS minimization is done using csswring plugin.
First you should install borschik
and this module into your project and save it into package.json
npm install borschik borschik-tech-postcss --save
Then you could run borschik
./node_modules/.bin/borschik --tech postcss -i your.css --o your.min.css
Source map generation is enabled by default. In the case above it will be written to your.min.css.map. When output is a stream (stdout) the source map will be embedded into css content as a comment pragma. For example:
//# sourceMappingURL=data:application/json;base64, ...
Options
You can disable source map generation using sourceMap
tech option. For example:
./node_modules/.bin/borschik --tech istanbul -i your.css -o your.min.css --tech-options '{"sourceMap": false}'
You can force to embed source map into file by specifying the inlineMap
tech option. For example:
./node_modules/.bin/borschik --tech istanbul -i your.css -o your.min.css --tech-options '{"inlineMap": true}'
See MIT LICENSE.
FAQs
borschik tech that expands css imports, minifies styles, freezes linked resources. Source map can be generated for output file.
The npm package borschik-tech-postcss receives a total of 3 weekly downloads. As such, borschik-tech-postcss popularity was classified as not popular.
We found that borschik-tech-postcss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.