Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
conduit-sass
Advanced tools
Conduit SASS files (with Bootstrap 4 included) + optional build tools for modifying templates
This repository contains the SASS files required for frontend apps that adhere to the Conduit ProductionReady spec. The entry file scss/conduit.scss
not only includes all Conduit specific styles, but also includes a version of Bootstrap 4 Alpha. This ensures all future versions of Conduit SASS are guaranteed to work, as B4 is in alpha and subject to frequent changes.
Run npm install conduit-sass --save
, then in your project's local SASS file @import 'node_modules/conduit-sass/scss/conduit.scss';
We've included a simple gulp task that assists in viewing & modifying the templates & SASS. To preview and modify Conduit SASS & HTML with livereload, do the following:
gulp
Your browser should open automatically with livereload enabled. Whenever you edit SASS files in the scss/
folder or modify HTML files in the pages/
folder, gulp will regenerate & place a single CSS file and the individual HTML files into the app/
folder.
FAQs
Conduit SASS files (with Bootstrap 4 included) + optional build tools for modifying templates
We found that conduit-sass demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.