Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
mimosa-autoprefixer
Advanced tools
This is a CSS autoprefixing module for the Mimosa build tool. It will transform your CSS code to have the necessary/configured vendor prefixes.
For more information regarding autoprefixer, see https://github.com/ai/autoprefixer.
For more information regarding Mimosa, see http://mimosa.io.
Add 'autoprefixer'
to your list of modules. That's all! Mimosa will install the module for you when you start mimosa watch
or mimosa build
.
Autoprefixer lets you write your CSS rules without needing to consider vendor prefixes.
This module will run autoprefixer over your CSS during mimosa watch
and mimosa build
. It will rewrite the CSS to include the selected vendor prefixes. It will create a source map for the altered CSS. If the incoming CSS had an inline source map, autoprefixer will rebuild that map.
autoprefixer: {
browsers:[ "> 1%", "last 2 versions", "Firefox ESR", "Opera 12.1" ],
map: true,
cascade: true
}
browsers
: list of browsers to use, see the info on browsers on the autoprefixer github. The default here is the autoprefixer default.map
: whether or not to create inline maps, maps and source are always inlinedcascade
: make output look like thisa {
-webkit-box-sizing: border-box;
-moz-box-sizing: border-box;
box-sizing: border-box
}
FAQs
An autoprefixer module for Mimosa
We found that mimosa-autoprefixer demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.