
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
tailwindcss-custom-groups
Advanced tools
[!IMPORTANT] As of version 3.2, Tailwind CSS now offers named groups natively.
Out of the box, Tailwind CSS comes with a group-
utility that's used for styling elements depending on the state of their parents.
The plugin right here lets you generate custom group utilities in the form of group-*-
, where *
represents an arbitray name.
In most scenarios, the default group-
utility works just fine. As your app grows in complexity, however, you might find yourself looking for solutions to needs such as:
group-
utilitiesgroup-
usergroup-
labels if many are used in the same componentIf so, this plugin will help you.
First, install the plugin:
npm install tailwindcss-custom-groups --save-dev
Then add the plugin to your Tailwind CSS config file:
theme: {
customGroups: {
// For example, `row` results in `group-row-`
names: ['row']
}
},
plugins: [
require('tailwindcss-custom-groups')
]
To avoid too much CSS being generated, every new group-*-
utility only supports a small list of pseudo-classes.
If you'd like to generate different ones, you can replace the defaults with customGroups.variants
:
variants: {
'odd': 'nth-child(odd)'
}
The package is based on this comment by @maelquerre, with various additions by @leo.
FAQs
Generate custom `group-` utilities for TailwindCSS
The npm package tailwindcss-custom-groups receives a total of 141 weekly downloads. As such, tailwindcss-custom-groups popularity was classified as not popular.
We found that tailwindcss-custom-groups demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.