
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
Mod Base is a design system package for use on Modernize's S3 microsites. This differs from our mod-style library because we will be removing the use of bootstrap, and will no longer house "component styles." Component styles will live with their shared component HTML / JS.
src / fonts / modstyle-icons/ - icon font folder
styles /
base /
icons /
templates /
.editorconfig - rules for code editors based on company's code guidelines
.sass-lint.yml - configuration for SASS/SCSS linter
package.json - Node modules used in mod-base
When updating mod-base, you will want to create a beta version to pull into a site for testing purposes (before publishing a new, stable version).
For more detailed instructions on updating NPM packages — checkout our documentation! How to Update NPM Packages
FAQs
Base Styles for S3 Sites
We found that mod-base demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.