Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
create-postcss-plugin
Advanced tools
Create PostCSS Plugin lets you quickly create new PostCSS plugins with documentation, tests, and built in compiling for supported Node environments.
npm init postcss-plugin YOUR_DESTINATION
npx create-postcss-plugin YOUR_DESTINATION
After completing the instructions, write your plugin to src/index.js
and
update README.md
with further details outlining your plugin functionality.
You can pass options into postcss-plugin to automate plugin creation.
The to
argument defines the destination of the new project. The first
undefined argument will also determine this value.
npm init postcss-plugin --to path/to/plugin
The title
argument defines the formal name of the project.
npm init postcss-plugin --title Super
npm init postcss-plugin --title "Awesome Blossom"
The id
argument defines the id used by the project package.json and
repository.
npm init postcss-plugin --id awes-blos
The desc
or description
argument defines the description used by the
project README.md and package.json.
# becomes "Use exciting new functions" and "Awesome Blossom lets you create new functions in CSS."
npm init postcss-plugin --desc "use exciting new functions"
# becomes "Use exciting new functions" and "Awesome Blossom lets you create new functions in CSS."
npm init postcss-plugin --description "use exciting new functions"
The author
argument defines the author used by the project package.json.
npm init postcss-plugin --author "Joe Bloggs"
The email
argument defines the email used by the project package.json.
npm init postcss-plugin --email "postcss@postcss.org"
The user
argument defines the repository user or group hosting the project.
npm init postcss-plugin --user "postcss"
The keywords
argument defines the keywords used by the project package.json.
npm init postcss-plugin --keywords "awesome,blossom"
The no-install
argument instructs the project to not automatically install
dependencies.
npm init postcss-plugin --no-install
2.0.0 (Jan 31, 2019)
pkgdesc
)postcss
to 7.0.14 (patch)FAQs
Quickly create new PostCSS plugins
We found that create-postcss-plugin demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.