
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
sass-color-json
Advanced tools
#SASS-COLOR-JSON Convert any SASS file with color variables to a json file.
We currently support: hex colors (3 or 6 character), rgb, hsl, rgba & hsla.
Module can be used as CLI or within your node project.
As of version 0.2.0 We now have a Synchronous (0.1.0) and Asynchronous version. The CLI still relies on the synchronous version. No other options have changed. The script overall was made shorter and faster.
###Options (as json object {}) input
Required: True
Type: String
Default: " "
output
Required: False
Type: String
Default: False
When not supplied: Returns JSON object
isString
Require: False
Type: Boolean
Default: False
###Example SASS / SCSS
//Example SASS -> JSON
$red-short: #d00;
$red-long: #dd0000;
$red-rgb: rgb(221, 0, 0);
$red-rgba: rgba(221, 0, 0, .5);
$red-hsl: hsl(0, 100, 47);
$red-hsla: hsla(0, 100, 47, .5);
Terminal:
$ sass-color-json --input ~/_colors.scss --output ~/colors.json
Node Module
/**
* BLOCKING SYNC VERSION
**/
var sassColorJson = require('sass-color-json'),
sassColorOptions = {
input: '_colors.scss'
},
jsonObj = sassColorJson.sync(sassColorOptions);
console.log(jsonObj);
/**
* NON-BLOCKING ASYNC VERSION
* Async keeps all the same functionality as previous versions, but is non-blocking.
**/
sassColorJson.async(sassColorOptions, function (err, data) {
if (err) {
throw new Error('Error: ' + err);
}
console.log(data);
});
/**
* Processing Strings
**/
var buffer = fs.readFile('_colors.scss', function (err, data) {
if (err) {
throw new Error('Error: ' + err);
}
var sassColorOptions = {
input: data,
isString: true
};
sassColorJson.async(sassColorOptions, function (err, data) {
if (err) {
throw new Error('Error: ' + err);
}
console.log(data);
});
});
Output:
{
"red-short": {
"aliases": false,
"isAlias": false,
"full": "$red-short: #d00;",
"original": {
"name": "$red-short:",
"value": "d00;",
"full": "$red-short: #d00;"
},
"name": "red-short",
"type": "#",
"value": "d00"
},
"red-long": {
"aliases": false,
"isAlias": false,
"full": "$red-long: #dd0000;",
"original": {
"name": "$red-long:",
"value": "dd0000;",
"full": "$red-long: #dd0000;"
},
"name": "red-long",
"type": "#",
"value": "dd0000"
},
"red-rgb": {
"aliases": false,
"isAlias": false,
"full": "$red-rgb: rgb(221, 0, 0);",
"original": {
"name": "$red-rgb:",
"value": "(221, 0, 0);",
"full": "$red-rgb: rgb(221, 0, 0);"
},
"name": "red-rgb",
"type": "rgb",
"value": "(221, 0, 0)"
},
"red-rgba": {
"aliases": false,
"isAlias": false,
"full": "$red-rgba: rgba(221, 0, 0, .5);",
"original": {
"name": "$red-rgba:",
"value": "(221, 0, 0, .5);",
"full": "$red-rgba: rgba(221, 0, 0, .5);"
},
"name": "red-rgba",
"type": "rgba",
"value": "(221, 0, 0, .5)"
},
"red-hsl": {
"aliases": false,
"isAlias": false,
"full": "$red-hsl: hsl(0, 100, 47);",
"original": {
"name": "$red-hsl:",
"value": "(0, 100, 47);",
"full": "$red-hsl: hsl(0, 100, 47);"
},
"name": "red-hsl",
"type": "hsl",
"value": "(0, 100, 47)"
},
"red-hsla": {
"aliases": false,
"isAlias": false,
"full": "$red-hsla: hsla(0, 100, 47, .5);",
"original": {
"name": "$red-hsla:",
"value": "(0, 100, 47, .5);",
"full": "$red-hsla: hsla(0, 100, 47, .5);"
},
"name": "red-hsla",
"type": "hsla",
"value": "(0, 100, 47, .5)"
}
}
###CLI Shortcuts
input: -i, --file, -f
output: -o
###Notes If no output is suppled the module returns JSON Object.
If output is only a directory module assumes filename sass-variables.json
FAQs
Generate json based on SASS color variables.
We found that sass-color-json demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.