Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
sass-convert
Advanced tools
Node.js bindings to sass-convert.
sass-convert is a library that provides binding for Node.js to sass-convert, the converter shipped with Sass. Integrates the converter in a stream pipeline.
type: String
The format to convert from. Can be css
, scss
, sass
.
type: String
The format to convert to. Can be scss
or sass
.
type: Boolean
default: false
Continue the stream chain even if the converter is unable to work properly
(e.g.: no sass-convert
binary found). Unconverted chunks/files won't be pushed
to the next pipe anyway.
type: Boolean
default: false
Whether to change converted files extensions to to
option (target format).
If you want more control over renaming, you should pipe gulp-rename
after the converter.
type: Boolean
Convert underscores to dashes.
type: Number|String
How many spaces to use for each level of indentation. Defaults to 2.
't'
means use hard tabs.
type: Boolean
Output the old-style :prop val
property syntax.
Only meaningful when generating Sass.
type: String
Specify the default encoding for input files.
type: Boolean
Use Unix-style newlines in written files.
Always true on Unix.
npm i sass-convert --save
You need to have Sass (Ruby Sass >=3.4.5) installed. Either globally or locally with Bundler.
var vfs = require('vinyl-fs');
var converter = require('sass-convert');
vfs.src('./input/**/*.+(sass|scss|css)')
.pipe(converter({
from: 'sass',
to: 'scss',
}))
.pipe(vfs.dest('./output'));
// sassdoc >= 2.0
var gulp = require('gulp');
var sassdoc = require('sassdoc');
var converter = require('sass-convert');
gulp.task('sassdoc', function () {
return gulp.src('./input/**/*.+(sass|scss)')
.pipe(converter({
from: 'sass',
to: 'scss',
}))
.pipe(sassdoc());
});
var fs = require('fs');
var vfs = require('vinyl-fs');
var source = require('vinyl-source-stream');
var rename = require('gulp-rename');
fs.createReadStream('./file.sass')
.pipe(source('file.sass'))
.pipe(converter({
from: 'sass',
to: 'scss',
}))
.pipe(rename('file.scss'))
.pipe(vfs.dest('./'));
sass-convert is unlicensed.
FAQs
Node.js bindings to sass-convert
The npm package sass-convert receives a total of 7,260 weekly downloads. As such, sass-convert popularity was classified as popular.
We found that sass-convert demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.