
Research
Security News
Malicious PyPI Package Exploits Deezer API for Coordinated Music Piracy
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
davanmonet
Advanced tools
A Pattern Library system that compiles SASS/LESS to CSS and gives preview of Markdown documentation
You can use this project in two ways, either clone the repository and work in it directly, or use it as a grunt task.
Clone this repository and run the following commands in the base directory (we use npm as an example but recommend you use yarn)
npm install
npm install davanmonet --save-dev
In your package.json
"config": {
"configFile": "./configs/projectoptions.yml"
},
In your package.json
"scripts": {
"dev": "node node_modules/davanmonet/dvm-build/dev-server.js"
},
Then simply start the project in development mode:
npm run dev
Documentation is written in Markdown. A page visible on the website can consist of multiple markdown files. They will be automatically combined if they have the same component id (See primary.md and secondary.md in the button folder).
To create a component preview, wrap a code segment with :::componentpreview If a component has multiple states just add more code segments with a headline above the code to name the state. See the example documentation in this project
In some cases, the built-in preview frame might not work for you. In that case you can create a static HTML-file instead, and display it using an iframe. Use this markdown to cerate an iframe: :::iframe(url/to/your-file.html)
If you include the client script for iFrame Resizer in the document in the iframe, it will automatically resize itself to fit the content. You can also specify the height in the markdown, like this: :::iframe(url/to/your-file.html,600). Width will always be 100%.
Default configuration resides in /configs/projectoptions.yml It can be a JSON file as well. Just specify the correct path to the options file in your gruntfile configuration.
You can change where the system will put compiled css and where your source files are located
The system will create an index of all the documentation (also used by the preview), this will specify where that index is saved and what metadata to add to the index.
For keys to index we recommend relying only on strings. If a index key is not present in the documentation metadata it will not be included per documentation file.
The one exception of this is the key "private". If it is present in the configuration we will always cast it to a boolean.
Add target files here. These can be anything that Webpack can understand. By default Less, Sass and JS (es6) is supported, but you can add more loaders to Webbpack for other languages.
The option compileIndividualFiles will create one less file per source files.
This setting enables postcss-loader. For this to work, you need to create a postcss.config.js file in your project root. Read more about how to configure Post CSS here.
Settings for ports etc
Add folders that should be included in the less/sass/index compilation. If this is left empty, all folders in your specified src directory will be included.
The options "userconfig" takes a string with a path to additional configuration for a specific user. This file should not be checked in. And the application will run even if the file is not present. The content of the file will extend the existing options for the project. This makes it possible for developers to choose which port to run the dev environment on
In order to use On Site Preview, onSitePreview.js need to be loaded on the target site, like this:
<script src="http://localhost:9001/ospClient.js"></script>
Below is an example config snippet for On Site Preview.
The "onsitepreview" object should be at the root level of the configuration tree, preferrably in the user config file (user-conf.json).
"onsitepreview":
{
"components":
[
{
"guid": "31495b40-9492-40e4-86e3-1e06bfc40171", // Required. GUID of the compontent
"hook": "#SomeElement > div > p", // Required. Selector at which the component will be injected
"state": 0, // Optional. State index. 0 will be the first state that is defined. Defaults to 0.
"inject_pos": "after", // Optional. Specifies where it will be injected in relation to the selector. Before, after, append or prepend. Defaults to after.
"wrapper": "<p class='preview'></p>", // Optional. The component will be wrapped in this tag if specified.
"extra_css": ".preview .some-component { position: absolute; width: 100%; }" // Optional. This CSS will be injected in the page in addition to the component.
}
]
}
npm run build
Compiles the project into the Dist folder. The build will generate three folders.
npm run dev
This will create the css and start a webserver so you can preview your work
FAQs
A pattern library system
The npm package davanmonet receives a total of 4 weekly downloads. As such, davanmonet popularity was classified as not popular.
We found that davanmonet demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.
Security News
Newly introduced telemetry in devenv 1.4 sparked a backlash over privacy concerns, leading to the removal of its AI-powered feature after strong community pushback.