
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
gridsome-plugin-windicss
Advanced tools
Windi CSS for Gridsome, it's fast! ⚡️
a.k.a On-demand Tailwind CSS
⚡️ See speed comparison with Tailwind
tailwind.config.js
@apply
/ @screen
directives in any file: Vue SFC, Less, SCSS, SASS, PostCSS, Stylusbg-gray-200 hover:(bg-gray-100 text-red-300)
yarn add gridsome-plugin-windicss -D
# npm i gridsome-plugin-windicss -D
:warning: This module is a pre-release, please report any issues you find.
Within your gridsome.config.js
add the following.
// gridsome.config.js
module.exports = {
// ...
plugins: [
{
use: 'gridsome-plugin-windicss',
options: {
// see https://github.com/windicss/vite-plugin-windicss/blob/main/packages/plugin-utils/src/options.ts
}
},
],
}
This module won't work with gridsome-plugin-tailwindcss
, you will need to remove it.
plugins: [
{
- use: 'gridsome-plugin-tailwindcss',
- options: {
- // ...
- }
},
],
If you have a tailwind.config.js
, please rename it to windi.config.js
or windi.config.ts
.
See here for configuration details.
If you were previously using gridsome-plugin-tailwindcss
, please consult the documentation on migrating.
export default {
scan: {
dirs: ['./'],
exclude: [
'node_modules',
'.git',
'dist',
'.cache',
'.temp',
],
},
preflight: {
alias: {
// add gridsome aliases
'g-link': 'a',
'g-image': 'img',
}
}
}
ngridsome.config.js
module.exports = {
// ...
plugins: [
{
use: 'gridsome-plugin-windicss',
options: {
preflight: false,
}
},
],
}
@media
directive with scoped style can only work with css
postcss
scss
but not sass
, less
nor stylus
MIT License © 2021 Harlan Wilton
FAQs
Windi CSS for Gridsome
The npm package gridsome-plugin-windicss receives a total of 18 weekly downloads. As such, gridsome-plugin-windicss popularity was classified as not popular.
We found that gridsome-plugin-windicss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.