
Research
Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.
diamondpkg
Advanced tools
diamond supports node 4, 5, 6, and 7 with npm 3 or 4 (Note: node 4 comes with npm 2)
Let's be upfront, we collect data. You will soon be able to limit the data we collect. All data is anonymous. This data is not shared with anyone outside of the diamond team.
diamond is a package manager for Sass and Less. diamond allows you to mix and match (most of the time) Sass and Less packages. You can also ship custom functions to be run after compiling, or even Less plugins and Sass importers and functions.
Feel free to include this badge in your project.
[](https://diamond.js.org)
https://diamond.js.org/badge.svg
https://diamond.js.org/badge.png
Using npm:
npm i -g diamondpkg
Or install the latest version from GitHub:
npm i -g diamondpkg/diamond
Lets say you want to use Bootstrap in your next project.
You can find Bootstrap under the package name bootstrap
You install with the install command
diamond install bootstrap
This generates a diamond folder with all of the packages.
Do not edit any files in this folder.
diamond uses a custom import format when importing packages.
Examples:
@import "~bootstrap"; will import the main file from Bootstrap, or throw an error if the package does not have a main file.@import "~bootstrap/file.scss" will import file.scss from the package Bootstrap.We want to import Bootstrap's main file, so we will use ~bootstrap
@import "~bootstrap";
#foo {
color: white;
}
To use with vanilla CSS or another preprocessor, simply link the diamond/autoload.css file in your HTML. Compiling is not required with CSS.
Once we have written our sass, we are ready for compiling.
If you try
node-sass myfile.scss
it will give you errors about not being able to find the file ~bootstrap.
This is because you aren't using diamond's custom importer.
It is recommended to use the compile command to compile your Sass instead of node-sass.
While this is not required, some packages like concise.css use functionality only found
in the compile command. You will be warned if you are missing out on features not using
the compile command.
diamond compile -o output.css input.scss
To compile with node-sass, use the --importer flag
node-sass --importer diamond input.scss > output.css
where diamond is the generated diamond folder on install.
To compile with Less, either use the compile command, or lessc. (They both have the same features)
diamond compile -o output.css input.less
lessc --diamond input.less output.css
This uses less-plugin-diamond as a plugin, which is installed when you install diamond.
FAQs
Dependency management built for Sass, Less, Stylus, and CSS.
The npm package diamondpkg receives a total of 5 weekly downloads. As such, diamondpkg popularity was classified as not popular.
We found that diamondpkg demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Malicious Namastex.ai npm packages appear to replicate TeamPCP-style Canister Worm tradecraft, including exfiltration and self-propagation.

Product
Explore exportable charts for vulnerabilities, dependencies, and usage with Reports, Socket’s new extensible reporting framework.

Product
Socket for Jira lets teams turn alerts into Jira tickets with manual creation, automated ticketing rules, and two-way sync.