
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
employer-style-grid
Advanced tools
A stack-agnostic SASS library providing a framework-agnostic, Neat-based grid system intended for the Employer experience
A stack-agnostic SASS library providing a framework-agnostic, Neat-based grid system intended for the Employer experience.
Add and install with Yarn:
$ yarn add employer-style-grid
Now, import sass/directives/00_variables/grid-settings
after Bourbon and Neat in your main application.scss
. Then, import sass/base
. For example:
@import 'bourbon/app/assets/stylesheets/bourbon';
@import 'bourbon-neat/app/assets/stylesheets/neat-helpers';
@import 'bourbon-neat/app/assets/stylesheets/neat';
@import 'employer-style-grid/sass/base';
@import 'your-app';
You can now use Neat mixins and the provided breakpoints (see _grid-settings.scss
), mixins and selectors.
At the moment, only uncompiled SASS source files are available for consumption. That means your application will need to perform the precompilation, whether it be through Webpack, Gulp, Grunt, Rails asset pipeline, etc. Do note that employer-style-grid
simply wraps around and depends upon Neat to actually power its grid system.
After your PR is merged, update the semantic version number appropriately, add a release and publish
via Yarn or npm.
Then update the package.json
file in your project with the new version:
"dependencies": {
"employer-style-grid": "^2.0.0"
}
dist
for easy consumptionFAQs
A stack-agnostic SASS library providing a framework-agnostic, Neat-based grid system intended for the Employer experience
We found that employer-style-grid demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.