
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
sass-easy-bem
Advanced tools
Not just another mixins project with only, @include element('name')
and the same for blocks and modifiers.
Did you know http://getbem.com/? Well, this toolbox will help you strictly follow the rules the easiest way you'll see.
Just check the examples:
Let's start with a container containing a button:
@include block('my-container') {
@include element('my-button') {
color: red;
}
}
Gives:
.my-container__my-button {
color: red;
}
Ok, nothing particular. So now, I wan't to add a modifier blue to my button.
@include block('my-container') {
@include element('my-button') {
color: red;
@include modifier('blue') {
color: blue;
}
}
}
Gives:
.my-container__my-button {
color: red;
}
.my-container__my-button.my-container__my-button--blue {
color: blue;
}
Yep, this is striclty the rule of http://getbem.com/.
Still not impressed? Ok.
I want… A cyan button if my button get the blue AND green modifiers. But also ONLY if my container have a allow-color-mixes modifier.
Nothing more simple. Just do:
@include block('my-container') {
@include modifier('allow-color-mixes') {
@include element('my-button') {
@include modifier('blue') {
@include modifier('green') {
color: cyan;
}
}
}
}
}
Gives:
.my-container.my-container--allow-color-mixes .my-container__my-button.my-container__my-button--blue.my-container__my-button--green {
color: cyan;
}
Yep, it works!
And you know what? It is tested!
FAQs
BEM made easy for Sass
The npm package sass-easy-bem receives a total of 39 weekly downloads. As such, sass-easy-bem popularity was classified as not popular.
We found that sass-easy-bem demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.