Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
coffeekraken
Advanced tools
We are a young collectve of front-end creative developers with one goal in mind. Build tools to make every team working day life better
Sugar gives you a lot of cool stuff to enhance your codebase. It basically does nothing by default but let you grab what you want from it. It can be the colors management feature, as well as the spaces management, helper classes, etc...
We like to think about this toolkit as
A little (but powerful) sugar in your codebase
The primary goal of this toolkit is to cover these needs:
SWebComponent
class
npm install coffeekraken-sugar --save
Release the kraken !!! 🦑
Here's how to get started quickly:
// import sugar
@import "node_modules/coffeekraken-sugar/index";
// configure your sugar
@include s-setup((// configuration here...));
// init (required to be just after s-setup calls)
@include s-init();
// generate the classes if you want
@include s-classes();
In javascript, you just need to import what you want from the toolkit like so:
import STimer from "coffeekraken-sugar/js/classes/STimer";
// etc...
Here's a list of features that the toolkit will offer you. Don't worry, it seems like a lot, but you don't need to use all of them to start. Just pick what you need and let the rest aside...
.m-b-small
: Margin bottom small - .m-t-big
: Margin top big - .p-l
: Padding left (default) - Etc... - Helper mixins - And more...Sugar provide a lot of cool functions and classes that you can use inside your project. The main goal sugar try to achieve is to give you some cool tools that you can or not use. It's your choice and sugar will never force you in any way.
All the javascript capabilities of sugar are well structured and splited inside the repository so you will be able to grab only what you want from it. Here's some examples of functions and classes you might load in your project:
import whenAttribute from "coffeekraken-sugar/js/dom/whenAttribute";
import closest from "coffeekraken-sugar/js/dom/closest";
import whenInViewport from "coffeekraken-sugar/js/dom/whenInViewport";
import whenAttribute from "coffeekraken-sugar/js/dom/whenAttribute";
import closestNotVisible from "coffeekraken-sugar/js/dom/closestNotVisible";
import SColor from "coffeekraken-sugar/js/classes/SColor";
import STimer from "coffeekraken-sugar/js/classes/STimer";
import SWebComponent from "coffeekraken-sugar/js/core/SWebComponent";
// etc...
Sugar is also focused on being a good friend with other tools. Here's some tools that you can use with:
Sugar has some goals it try to achieve, and have also some things that it does intentionally not like:
Sugar is an open source project and will ever be! You are more that welcomed to contribute to his development and make it more awesome every day. To do so, you have several possibilities:
IE / Edge | Firefox | Chrome | Safari |
---|---|---|---|
IE11+ | last 2 versions | last 2 versions | last 2 versions |
As browsers are automatically updated, we will keep as reference the last two versions of each but this component can work on older ones as well.
The code is available under the MIT license. This mean that you can use, modify, or do whatever you want with it. This mean also that it is shipped to you for free, so don't be a hater and if you find some issues, etc... feel free to contribute instead of sharing your frustrations on social networks like an asshole...
We try to be some cool guys that build some cool tools to make our (and yours hopefully) every day life better.
FAQs
We are a young collectve of front-end creative developers with one goal in mind. Build tools to make every team working day life better
The npm package coffeekraken receives a total of 0 weekly downloads. As such, coffeekraken popularity was classified as not popular.
We found that coffeekraken demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.