
Research
Security News
Lazarus Strikes npm Again with New Wave of Malicious Packages
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
css-byebye
Advanced tools
CSS Byebye is a node module that lets you explicitly remove the CSS rules that you don't want.
It's very simple: pass a list of selectors that you want to exclude and it will remove them and the associated rules from your CSS.
I've found some cases where this approach is easier than using more powerful tools like uncss. Use what's best for you and give some feedback :)
CSS Byebye is built with postcss.
npm install postcss css-byebye -D
From v4, postcss is a peer dependency that you need to install yourself.
CSS Byebye is a CSS post processor and a postcss
plugin.
Read the postcss docs to know how to use it for your setup.
Run it as indicated in postcss docs:
postcss(cssbyebye(options)).process(css)
rulesToRemove
property defined.rulesToRemove
is an array of strings
or regular expressions
(selectors).
If you provide a string, it will remove the rule(s) for this exact selector.
Some CSS:
a {
font-size: 12px;
}
.hello .h1 {
background: red;
}
.world {
color: blue;
}
Using the plugin:
var postcss = require('postcss')
var cssbyebye = require('css-byebye')
var rulesToRemove = ['.hello .h1', '.world']
var options = {rulesToRemove: rulesToRemove, map: false}
// pretend that css var contains the css above
var result = postcss(cssbyebye(options)).process(css)
result
will be an object like this:
{
css: 'a { font-size: 12px; }'
}
If you use the postcss map
option, then source map will be added to the result object.
var rulesToRemove = ['.hello', /.*\.world.*/]
In this case, it would:
.hello
.world
class.You can ignore certain rules or certain block of rules to avoid them being removed, even if they match the criteria, adding comments with control directives. These comments will be removed from the final code.
var rulesToRemove = ['.hello .h1', '.world']
a {
font-size: 12px;
}
/* byebye:ignore */
.hello .h1 {
background: red;
}
.hello .h1 {
text-align: left;
}
/* byebye:begin:ignore */
.world {
color: blue;
}
.world {
border: 1px solid #ccc;
}
/* byebye:end:ignore */
.world {
background: white;
}
a {
font-size: 12px;
}
.hello .h1 {
background: red;
}
.world {
color: blue;
}
.world {
border: 1px solid #ccc;
}
FAQs
Remove the CSS rules that you don't want, with a list of selectors
The npm package css-byebye receives a total of 3,135 weekly downloads. As such, css-byebye popularity was classified as popular.
We found that css-byebye demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
The Socket Research Team has discovered six new malicious npm packages linked to North Korea’s Lazarus Group, designed to steal credentials and deploy backdoors.
Security News
Socket CEO Feross Aboukhadijeh discusses the open web, open source security, and how Socket tackles software supply chain attacks on The Pair Program podcast.
Security News
Opengrep continues building momentum with the alpha release of its Playground tool, demonstrating the project's rapid evolution just two months after its initial launch.