Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
YAML (Yet Another Multicolumn Layout) is a modular CSS framework for truly flexible, accessible and responsive websites. YAML is focussed on device independent screen design and provides bullet-proof modules for flexible layouts. This is a perfect starting point and the key to truly responsive design.
Ruby >= 1.9.3
Sass 3.2+ (if you want to use YAML Sass files)
In your Gemfile:
gem 'yamlcss'
Then run:
$ bundle install
Restart your server. Then rename application.css
to application.css.scss
:
mv app/assets/stylesheets/application.css app/assets/stylesheets/application.css.scss
Import YAML at the beginning of application.css.scss. All additional stylesheets must be imported below YAML:
@import "yaml";
YAML includes an easy way to generate a directory with all the necessary
files.
For command line help: $ yamlcss help
gem install yamlcss
Install YAML into the current directory by generating the yaml
folder:
yamlcss install
The generated folder will contain all the YAML files (CSS & Sass). It is recommended not to add or modify the YAML files so that you can update YAML easily.
You can specify a target directory using the path
flag:
yamlcss install --path my/custom/path/
Lastly, import the YAML core at the beginning of your stylesheet(s):
@import 'yaml/sass/yaml-sass/core/base';
For your IE hacks stylesheet, use:
@import 'yaml/sass/yaml-sass/core/iehacks';
If you're still using pure CSS, you'll find the important files in the directory yaml/yaml:
@import url("yaml/yaml/core/base.min.css");
YAML Gem is Copyright (c) 2014 Brain Gourmets GmbH. It is free software, and may be redistributed under the terms specified in the LICENSE.txt file.
Copyright (c) 2005-2013 Dirk Jesse
The YAML framework is published under the Creative Commons Attribution 2.0 License (CC-BY 2.0), which permits both private and commercial use.
Condition: For the free use of the YAML framework, a backlink to the YAML homepage (http://www.yaml.de) in a suitable place (e.g.: footer of the website or in the imprint) is required.
In general it would be nice to get a short note when new YAML-based projects are released. If you are highly pleased with YAML, perhaps you would like to take a look at my Amazon wish list?
If you are a commercial software developer and you want to release your software under a license that doesn't fit to the Creative Commons Attribution 2.0 License, you may purchase a commercial license. We offer the following commercial license models:
Full license texts and contact information are available at: http://www.yaml.de/license.html
FAQs
Unknown package
We found that yamlcss demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.