
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
handoff-app
Advanced tools
Automated documentation toolchain for building client side documentation from figma
A design token pipeline to read figma files, extract tokens as JSON, and transform tokens into dev ready artifacts.
Handoff is an open source tool for extracting design tokens from the Figma REST API and building frontend developer documentation from that Figma file. By automating the design token delivery, Handoff helps to eliminate bottlenecks between design and development.
Handoff is a collection of 4 javascript tools:
Handoff works by extracting design foundations and component data from well-formed Figma libraries, storing them as JSON, and then transforming them into design tokens. Those design tokens are published as SASS and CSS variables.
Out of the box, Handoff has native SCSS and CSS maps to connect these tokens to any site using the Bootstrap 5 frontend framework. If you use another framework, or custom CSS, you can easily write map files to connect the generated tokens with your site or application.
Once Handoff extracts design tokens and variables, it builds a statically generated NextJS application that can be published to the web. This asset can be hosted on a static webhost (NGINX, s3/Cloudfront, Cloudflare pages etc).
This pipeline from Figma to the Documentation Web app can be automated via CI/CD to provide automatic, up-to-date, easily readable developer documentation.
Handoff is Awesome. Handoff is also really new. We're constantly building new features, and expanding what it can do. We'd love to chat if you have a use case that isn't quite met.
Open the Handoff Figma starter and duplicate this project to your account
Publish components to the library
LibrariesYou'll need a developer token if you don't have one already
Help and AccountAccount SettingsPersonal Access TokenThe easiest way to get started is using the handoff-app init command to scaffold a new project:
npm install -g handoff-app
handoff-app init
This interactive CLI will guide you through:
The scaffolding will:
cd my-handoff-project
npm run fetch # Fetch design tokens from Figma
npm run start # Start the documentation site
This will fetch the latest from your Figma file and boot a demo site at http://localhost:3000
You can also install handoff-app globally:
npm install -g handoff-app
create-handoff-app
Or manually set up a project:
mkdir my-new-project && cd my-new-project
handoff-app fetch # Will prompt for Figma credentials
handoff-app start
npm run fetchOnce that runs, your browser should update with the new colors.
Pipeline customization is done in handoff.config.js under hooks (camelCase names: validateComponent, jsBuildConfig, registerHandlebarsHelpers, etc.). For example, registerHandlebarsHelpers runs after Handoff registers the built-in field and eq helpers so you can call handlebars.registerHelper for your .hbs preview templates.
See docs/api.md for hook arguments and examples.
Feel free to dive in! Open an issue or submit PRs.
Handoff follows the Contributor Covenant Code of Conduct.
MIT ©Convertiv
FAQs
Automated documentation toolchain for building client side documentation from figma
The npm package handoff-app receives a total of 839 weekly downloads. As such, handoff-app popularity was classified as not popular.
We found that handoff-app demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.