
Security News
/Research
Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
stylelint-config-kyt
Advanced tools
This is an extension of stylelint-config-standard with some overrides for CSS/Sass Modules.
If you want to install this linter extension, follow these install instructions.
stylelint-config-kyt
npm package:
npm i --save-dev stylelint stylelint-config-kyt stylelint-config-standard
.stylelintrc
file to your project's root{
"extends": "stylelint-config-nyt",
"rules": {}
}
The following guide is best used with the kyt
linter against CSS/Sass Modules.
{
in rule declarations.:
character.}
of rule declarations on a new lineBad
.avatar {
border-radius: 50%;
border: 2px solid white;
}
.no,
.nope,
.not_good {
// ...
}
#lol-no {
// ...
}
Good
.avatar {
border-radius: 50%;
border: 2px solid white;
}
.one,
.selector,
.perLine {
// ...
}
//
in Sass-land) to block comments.While it is possible to select elements by ID in CSS, it should generally be considered an anti-pattern. ID selectors introduce an unnecessarily high level of specificity to your rule declarations, and they are not reusable.
You should never define an ID selector in a CSS Module.
.scss
syntax, never the original .sass
syntax@include
declarations logically (see below)@include
or composes
declarations
Property declarations in alphabetical order
.btnGreen {
@include transition(background 0.5s ease);
background: green;
color: red;
font-weight: bold;
// ...
}
Nested pseudo-selectors
Nested pseudo-selectors go last, and nothing goes after them.
.btn {
@include color(red);
font-weight: bold;
&:hover {
cursor: pointer;
}
}
Prefer camelCased variable names (e.g. $myVariable
).
FAQs
StyleLint configuration for kyt projects.
The npm package stylelint-config-kyt receives a total of 51 weekly downloads. As such, stylelint-config-kyt popularity was classified as not popular.
We found that stylelint-config-kyt demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
/Research
Malicious npm package impersonates Nodemailer and drains wallets by hijacking crypto transactions across multiple blockchains.
Security News
This episode explores the hard problem of reachability analysis, from static analysis limits to handling dynamic languages and massive dependency trees.
Security News
/Research
Malicious Nx npm versions stole secrets and wallet info using AI CLI tools; Socket’s AI scanner detected the supply chain attack and flagged the malware.