
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
Given too much flexibility with CSS, sometimes it's hard to argue about existence of one or another CSS-spec property.
This project started of thinking about margin property. Rather than styling given element, it looks like it's trying to fix parent layout. And it's definitely container's job to align elements and spacing them.
So, let's try to see what happen if we try to create more restricted, opinionated approach on CSS.
These tools utilizes styles CSS-in-JS utility and generate styles-friendly code for it.
import strictCSS from 'strictcss'
const styles = strictCSS({
container: {
display: 'flex',
flexDirection: 'row',
' > div': {
marginTop: '10px'
}
},
item: {
marginTop: '10px'
}
})
// This will cut marginTop property of `item` style and print error in the console.
// Whereas it'll allow margin properties for nested styles, to allow container to style children properly.
// Except that, it works similar to `styles`
import layout from 'scrictcss/layout'
// Used to generate spacing for container children
// As it turns out that neither CSS-grid nor Flexbox are able
// to give individual per-row/column spacing for content
layout('column', '* 5px * 10px *')
// Should be read as
// - given group of three elements
// - with 5px spacing between 1st and 2nd and
// - 10px spacing between 2nd and 3rd
// This will produce styling for container
// {
// ' > :nth-child(3n+1)': {
// marginBottom: '5px'
// }
// ' > :nth-child(3n+2)': {
// marginBottom: '10px'
// }
// }
FAQs
strictCSS
The npm package strictcss receives a total of 0 weekly downloads. As such, strictcss popularity was classified as not popular.
We found that strictcss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.