Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
ve-theme-variants
Advanced tools
Simplifies creation of theme based token variants for Vanilla Extract
A helper for creating theme based token variants for Vanilla Extract.
npm i ve-theme-variants
See the Next example app for a full example.
These functions just abstract away a bit of the theming paradigm I use with Vanilla Extract.
You define component level variants for use in recipe()
, stylevariants()
or style()
in the theme directly. They don't have to by actual style rules but that's how I like to do it, so I can just spread the vars into style without any manipulation.
Here's a pseudo example of how you might create a Surface component with this method
// surfaceVariants.ts
export const surfaceVariants = {
light: {
surface0: { backgroundColor: color["zinc-100"] },
surface1: { backgroundColor: color["zinc-200"] },
surface2: { backgroundColor: color["zinc-300"] },
},
dark: {
surface0: { backgroundColor: color["zinc-950"] },
surface1: { backgroundColor: color["zinc-900"] },
surface2: { backgroundColor: color["zinc-800"] },
},
};
// theme.css.ts
export const { themeVars } = createThemeVariants(surfaceVariantsContract, [
surfaceVariants,
]);
// surface.css.ts
export const surface = recipe({
variants: {
level: {
0: style(themeVars.surface0),
1: style(themeVars.surface1),
2: style(themeVars.surface2),
},
},
defaultVariants: {
level: 0,
},
});
// theme.css.ts
import { createThemeVariants } from "ve-theme-variants";
export const { themeVars, themeClasses, themeSelectors } = createThemeVariants(
// this is the theme contract
{
brand: {
primary: "null",
},
surface: {
1: {
background: "null",
},
2: {
background: "null",
},
},
},
// these are the themed variants.
// this is an array so you can create each
// variant in isolation.
[
// brand
{
light: {
brand: {
primary: "blue",
},
},
dark: {
brand: {
primary: "darkblue",
},
},
},
// surface
{
light: {
surface: {
1: {
background: "#FFFFFF",
},
2: {
background: "#F8F8F8",
},
},
},
dark: {
surface: {
1: {
background: "#000000",
},
2: {
background: "#0C090A",
},
},
},
},
]
);
the function returns an object with these properties:
themeVars
are the css variables you can import and use in your css.ts
files
e.g themeVars.brand.primary
= 'var(--brand-primary)'
themeClasses
are the classes which when applied, will use that theme key's variants
e.g if you apply themeClasses.dark
to the body, dark variants will be used throughout. You can also apply a theme class to a nested element if you want to force that theme for a particular tree.themeSelectors
are the theme classes with &
included, for targeting a theme in the Vanilla Extract style
function.mapFn
By default createThemeVariants
maps the variable names to kebab-case (using just-kebab-case
), and strips out selectors
and :&
from style keys.
You can pass a mapFn
as the 3rd argument if you want to customize this
createThemeVariants(contract, tokens, (_value, path) => path.join("_").replace(/[&:,.()]+/g, "")
See Formatting the variable names
By default createThemeVariants
expects light
and dark
theme keys.
You can pass your own union type into the function like this:
const themeVariants = createThemeVariants<
"dark" | "light" | "print" | "high-contrast"
>();
A light wrapper on top of createGlobalThemeContract that applies the provided tokens to the :root
and formats them to kebab case.
createRootTheme
also takes an optional mapFn
argument to customize the mapping.
// root.css.ts
import { createRootTheme } from "ve-theme-variants";
export const { color } = createRootTheme({
color: {
primary: "blue",
},
});
// color.primary === 'var(--color-primary)'
FAQs
Simplifies creation of theme based token variants for Vanilla Extract
The npm package ve-theme-variants receives a total of 3 weekly downloads. As such, ve-theme-variants popularity was classified as not popular.
We found that ve-theme-variants demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.