Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
gulp-extract-media-queries
Advanced tools
Plugin extracts css rules inside of media queries and saves it to separated files.
Plugin extracts css rules inside of media queries and saves it to separated files.
var gulp = require("gulp");
var g = require("gulp-load-plugins")();
gulp.task("design.build", function() {
gulp.src("src/design/style.css")
.pipe(g.extractMediaQueries())
.pipe(gulp.dest("build"));
});
Task design.build
for below style.css
file:
* {
box-sizing: border-box;
}
@media (min-width: 640px) {
.container {
margin: 0 auto;
}
}
Produces following files:
style.css | min-width-640px.css |
---|---|
* { box-sizing: border-box; } | .container { margin: 0 auto; } |
And now you can include it in your html in such way:
<link rel="stylesheet" type="text/css" href="style.css" />
<link rel="stylesheet" type="text/css" href="min-width-640px.css" media="(min-width: 640px)" />
When a media query is true, the corresponding style sheet or style rules are applied, following the normal cascading rules. Style sheets with media queries attached to their tags will still download even if their media queries would return false (they will not apply, however).
Unless you use the not
or only
operators,
the media type is optional and the all type will be implied.
FAQs
Plugin extracts css rules inside of media queries and saves it to separated files.
We found that gulp-extract-media-queries demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.