Security News
RubyGems.org Adds New Maintainer Role
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
gatsby-design-tokens
Advanced tools
Design tokens for Gatsby's design system.
Design tokens originated at Salesforce—quoting the Lightning Desing System Design Tokens documentation:
Design tokens are the visual design atoms of the design system — specifically, they are named entities that store visual design attributes. We use them in place of hard-coded values (such as hex values for color or pixel values for spacing) in order to maintain a scalable and consistent visual system for UI development.
Gatsby's design tokens are following the System UI Theme Specification. They are not fully complying to the design token abstraction and are (initially) primarily focused on CSS/JS development – i.e. a potential output from design tokens.
They also are a work-in-progress but we do follow the Semantic Versioning specification. As such:
So to prevent your site from breaking due to a breaking change or looking dramatically different due to a minor version bump, we recommend the ~ comparator when using this package
Using npm:
npm install gatsby-design-tokens --save
Using Yarn:
yarn add gatsby-design-tokens
Find a work-in-progress list of design tokens in the design tokens documentation at gatsbyjs.org/guidelines/design-tokens.
import {
borders,
breakpoints,
colors,
fonts,
fontSizes,
fontWeights,
letterSpacings,
lineHeights,
mediaQueries,
radii,
shadows,
sizes,
space,
transition,
zIndices,
} from "gatsby-design-tokens"
FAQs
Gatsby Design Tokens
The npm package gatsby-design-tokens receives a total of 1,327 weekly downloads. As such, gatsby-design-tokens popularity was classified as popular.
We found that gatsby-design-tokens demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.
Security News
Research
Socket's threat research team has detected five malicious npm packages targeting Roblox developers, deploying malware to steal credentials and personal data.