
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
tachyons-documentation
Advanced tools
Warning: This is still very much a work in progress.
Rewriting Tachyons Docs using reactjs, es6, webpack, and react-router. Boilerplate taken from react-static-site-playground.
$ npm install
$ npm start
$ open http://localhost:8080
# Do NOT push to gh-pages branch directly.
# Instead, run this command in the terminal for gh-pages to render from the dist/ folder Webpack compiled for us:
$ git subtree push --prefix dist origin gh-pages
Only edit code in src/ directory. Webpack bundles and compiles that code into static files using static-site-generator-webpack-plugin, and it outputs the static files to dist/ where github pages reads from.
Running npm start runs scripts/buildModuleStats which generates data for each tachyon module and dumps it in src/data/tachyonsStats.js. Many files use this generated data to display module stats such as version, file size, selectors, rules, etc. Never manually add that data. Instead, bump the Tachyons module version in package.json, and the script will generate the data for you.
For static content, we keep most of that in json files in src/data/. If you need to modify text copy, please look there first.
Notes during early WIP stage:
src/paths.js and either src/routes.js or write it in your html as <Link to="docs/elements/images" ../>. Thinking of a dynamic solution so you only have to write it once..FAQs
Documentation site for Tachyons - http://tachyons.io/
The npm package tachyons-documentation receives a total of 4 weekly downloads. As such, tachyons-documentation popularity was classified as not popular.
We found that tachyons-documentation demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.