Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
scarab-scss
Advanced tools
Scarab is a Sass utility framework designed for rapid stylesheet development.
To get started, add Scarab as a dev-dependency in your project via npm:
npm install scarab-scss --save-dev
Import scarab.scss
at the beginning of your stylesheet:
@import "path/to/node_modules/scarab-scss/scss/scarab";
Importing Scarab creates a new global variable, $SCARAB
in your Sass project.
This is where your stylesheet configuration is stored:
$SCARAB: (
BASELINE: (),
BREAKPOINTS: (),
DURATIONS: (),
EASINGS: (),
PALETTES: (),
TYPEFACES: (),
TYPE-SCALE: ()
);
Scarab relies on this variable for most of its functions and mixins to work. It provides some sane defaults, but you should configure these on a per-project basis.
To configure variables in your stylesheet, use the define()
mixin:
// Example
// Usage: @include define( $key, $declaration... )
//
// Input a single argument for $declaration to
// replace the existing value for $key in $SCARAB.
//
//
// Input two arguments for $declaration to define
// a new value in a map, or replace an existing one.
// Create a new key, "BREAKPOINTS", in $SCARAB,
// and set its value to the second argument provided
@include define( breakpoints, (
"small": 600px,
"medium": 900px,
"large": 1300px
) );
// Replace the existing value of the "medium" breakpoint
@include define( breakpoints, "medium", 1024px );
// Define a new breakpoint, "huge", and set its value to 1600px
@include define( breakpoints, "huge", 1600px );
For more examples of configuration, have a look at how Scarab's default configuration is defined in scss/config/
.
Scarab is a utility framework, not a UI library. Therefore simply including the framework outputs zero CSS. Use Scarab to augment development and extend an exisitng UI library for your project, or create your own from scratch.
Easily access and manage your global stylesheet configuration with the define()
mixin, and getter functions like palette()
, duration()
, and typeface()
.
Declare responsive properties with the responsive()
mixin. This allows you to easily manage the appearance of responsive components, and reduce media query clutter in your stylesheet.
// Example
.button {
@include responsive(( padding-left, padding-right ), (
"base": 14px,
"medium": 18px,
"large": 22px
));
}
// Output
.button {
padding-left: 14px;
padding-right: 14px;
}
// `small` breakpoint
@media (min-width: 40em) {
.button {
padding-left: 18px;
padding-right: 18px;
}
}
// `large` breakpoint
@media (min-width: 90em) {
.button {
padding-left: 22px;
padding-right: 22px;
}
}
Use the type-scale()
mixin to generate typographic styles for an element at each breakpoint specified in the breakpoint map.
// Example
// config/type-scale.scss
//
// @include define( type-scale, "body", (
// "base": ( font-size: 0.8rem, line-height: 1.3 ),
// "small": ( font-size: 1rem, line-height: 1.4 ),
// "large": ( font-size: 1.2rem, line-height: 1.5 )
// ) );
body {
@include type-scale( body );
}
// Output
body {
font-size: 0.8rem;
line-height: 1.3;
}
// "small" breakpoint
@media (min-width: 40em) {
body {
font-size: 1rem;
line-height: 1.4;
}
}
// "large" breakpoint
@media (min-width: 90em) {
body {
font-size: 1.2rem;
line-height: 1.5;
}
}
Scarab also provides a bunch of other helpers mixins like transitions()
and query()
. More are planned in the future.
Included are the baseline-grid()
and element-overlay()
mixins, which overlay visual guides on top of the DOM. These help with achieving a consistent vertical rythmn.
Documentation is under development and is available in docs/
.
FAQs
Sass utility framework for rapid stylesheet development
The npm package scarab-scss receives a total of 78 weekly downloads. As such, scarab-scss popularity was classified as not popular.
We found that scarab-scss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.