Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
less-vars-to-js
Advanced tools
Read LESS variables from the contents of a file and returning them as a javascript object.
Read LESS variables from the contents of a file and return them as a javascript object.
$ npm install --save less-vars-to-js
I wrote this to use in our living style guide where we document our colour palette, typography, grid, components etc. This allows variables to be visualised in the style guide without having to read through the code (useful for non-technical team members).
Takes in the contents of a less file as a string
and returns an object
containing all the variables it found. It is deliberately naive as it is not intending to be a less parser. Basically it reads anything starting with an @
, so it will ignore comments, rule definitions, import statements etc.
Example :
@import (reference) "theme";
// Colour palette
@blue: #0d3880;
@pink: #e60278;
// Elements
@background: @gray;
@favourite: blanchedalmond;
// Grid
@row-height: 9;
.element {
@foreground: black;
color: @foreground;
}
Example output:
{
"@blue": "#0d3880",
"@pink": "#e60278",
"@background": "@gray",
"@favourite": "blanchedalmond",
"@row-height": 9,
"@foreground": "black"
}
Note: while it does return variables it finds within rules, it is recommended to use this on files containing only variables, as it's not a parser and is designed to extract design principles for style guides.
Option | Effect |
---|---|
resolveVariables | Resolves variables when they are defined in the same file. |
dictionary | When resolveVariables is true, passes an object to use when the value cannot be resolved in the same file. |
stripPrefix | Removes the @ or $ in the returned object keys. |
import lessToJs from 'less-vars-to-js';
import fs from 'fs';
// Read the less file in as string
const paletteLess = fs.readFileSync('palette.less', 'utf8');
// Pass in file contents
const palette = lessToJs(paletteLess, {resolveVariables: true, stripPrefix: true});
// Use the variables (example React component)
export default class Palette extends Component {
render() {
return (
<div>
{
Object.keys(palette)
.forEach(colour => (
<div style={{ backgroundColor: palette[colour] }}>
<p>{ colour }</p>
<p>{ palette[colour] }</p>
</div>
))
}
</div>
);
}
}
FAQs
Read LESS variables from the contents of a file and returning them as a javascript object.
We found that less-vars-to-js demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.