Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
postcss-message-helpers
Advanced tools
PostCSS helpers to throw or output GNU style messages.
This modules offers you some function to throw or just output messages with GNU style: sourcefile:lineno:column: message
$ npm install postcss-message-helpers
var messageHelpers = require("postcss-message-helpers")
var fnValue = messageHelpers.try(fn, source)
Execute fn
an return the value.
If an exception is thrown during the process, the exception will be catched, enhanced from source & re-throw.
var sourceMessage = messageHelpers.message(message, source)
Returns a message like sourcefile:lineno:column: message
.
source
should be a postcss source object from a node.
var source = messageHelpers.source(source)
Returns sourcefile:lineno:column
for a given source
postcss object.
// dependencies
var fs = require("fs")
var postcss = require("postcss")
var messageHelpers = require("postcss-message-helpers")
// css to be processed
var css = fs.readFileSync("input.css", "utf8")
// process css
var output = postcss()
.use(function(styles) {
styles.eachDecl(function transformDecl(decl) {
// will catch, adjust error stack, line, column & message (gnu style) then re-throw
messageHelpers.try(function IwillThrow() {
if (decl.value.indexOf("error(") > -1) {
throw new Error("error detected: " + decl.value)
}
}, decl.source)
// will output a gnu style warning
if (decl.value.indexOf("warning(") > -1) {
console.warning(messageHelpers.message("warning: " + decl.value, decl.source))
}
})
})
.process(css)
.css
Checkout tests for more examples.
Work on a branch, install dev-dependencies, respect coding style & run tests before submitting a bug fix or a feature.
$ git clone https://github.com/MoOx/postcss-message-helpers.git
$ git checkout -b patch-1
$ npm install
$ npm test
FAQs
PostCSS helpers to throw or output GNU style messages
The npm package postcss-message-helpers receives a total of 509,140 weekly downloads. As such, postcss-message-helpers popularity was classified as popular.
We found that postcss-message-helpers demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.