
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
lab-spectral
Advanced tools
Spectral by HTML5 UP html5up.net | @n33co Free for personal and commercial use under the CCA 3.0 license (html5up.net/license)
A big, modern, blocky affair with a mobile-style menu, fully responsive styling, and an assortment of pre-styled elements. So, pretty much what you were expecting -- except, of course, for how it's put together, specifically:
It's built on Skel 3*, a leaner, more modular rewrite of my responsive framework.
(* = still in development as of this writing)
It uses flexbox*, which eliminates all kinds of terrible hacks and clunky layout stopgaps (like CSS grid systems).
(* = not supported on IE8/9, but non-flexbox fallbacks are included)
It uses Sass* a lot more intelligently, thanks in part to several new mixins and functions I've been working on (as well as a few by @HugoGiraudel).
(* = still entirely optional if you prefer vanilla CSS :)
A ton of other stuff.
In short, Spectral's the culmination of several new things I'm working on/trying out, so please, let me know what you think :)
Demo images* courtesy of Unsplash, a radtastic collection of CC0 (public domain) images you can use for pretty much whatever.
(* = not included)
AJ n33.co @n33co dribbble.com/n33
Credits:
Demo Images:
Unsplash (unsplash.com)
Icons:
Font Awesome (fortawesome.github.com/Font-Awesome)
Other:
jQuery (jquery.com)
html5shiv.js (@afarkas @jdalton @jon_neal @rem)
background-size polyfill (github.com/louisremi)
Misc. Sass functions (@HugoGiraudel)
Respond.js (j.mp/respondjs)
Skel (skel.io)
FAQs
canner can
We found that lab-spectral demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.