Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Bones for Rails packages the current build of Bones CSS Framework and inserts applicable portions of it into the asset pipeline to help streamline the design of your application.
A documentation website for Bones is in the works. For now, all documentation for the framework itself can be found here.
Add this line to your application's Gemfile:
gem 'bones-rails'
Install using:
$ bundle install
Or install it to your system:
$ gem install bones-rails
If you prefer to have more control over Bones, I'd suggest checking out the SCSS method of installation. This installation of Bones is optimized for use in Ruby on Rails projects.
We can add the necesasry files to the asset pipeline by running:
$ rails g bones:install
The installation generator performs a number of tasks you should be aware of:
Bones requires that you use the .scss
extension for your application stylesheet (your manifest file). If it detects anything other than application.scss
,
it will change the filename to application.scss
Once we're sure application.scss
exists, the generator adds the following line to the top of your application.scss
file:
@import 'bones/bones';
The controller (or manifest file) for Bones is bones.scss
. This is where you configure which modules you'd like to load. First, we create a new directory:
app/assets/stylesheets/bones
. Then we place the new configuration file into this directory: app/assets/stylesheets/bones/bones.scss
.
Last, we add all the configuration files to a new directory: app/assets/stylesheets/bones/bones-config
.
In this directory is where you can configure Bones to your liking and see it change when you refresh your browser.
git checkout -b my-new-feature
)git commit -am 'Add some feature'
)git push origin my-new-feature
)FAQs
Unknown package
We found that bones-rails demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.