Open Sesame: How a Fail-Open Bug in Open VSX's New Scanner Let Malware Walk Right In

Design Specification — Open Sesame: How a Fail-Open Bug in Open VSX's New Scanner Let Malware Walk Right In

Overview

This design system was extracted programmatically from the source page. It is built on a light canvas (#FFFFFF), ink text (#000000), a vivid accent (#83311A). All type is set in Season Sans. Detected font weights: 300, 400, 500, 600, 700. Detected style signatures: technical / mono accents.

Logo asset(s): https://cdn.prod.website-files.com/67bf17e426d92bdda54af956/68dd8b40ae898e260e0dd5e5_koidex-logo%20(1).svg · https://cdn.prod.website-files.com/67bf17e426d92bdda54af956/67c8217077b742ad19cab085_koi-logo.svg

Color System

Detected palette (by frequency)

Assigned roles

Roles are taken from the page's own semantic CSS custom properties when present, otherwise inferred from usage frequency + luminance/saturation.

Surface ramp (derived from detected light neutrals)

Gradients

• radial-gradient(rgba(249, 63, 18, 0.5) 1px, transparent 1px)
• linear-gradient(currentColor,currentColor)

Typography

Primary typeface: Season Sans — stack: Season Sans

Font stacks (most used first)

• Season Sans
• Mdnichromevariable Infra,Arial,sans-serif
• monospace
• Season Sans,Arial,sans-serif
• inherit
• webflow-icons
• webflow-icons!important
• Arial,sans-serif
• Mdnichromevariable Infra
• -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol"

Derived type scale

Font sizes (by frequency)

Weights in use: 300, 400, 500, 600, 700

Line heights (by frequency)

Letter spacing (by frequency)

Spacing

Derived spacing scale

Raw values (by frequency)

Borders & Radius

Derived radius tokens

Raw values (resolved, by frequency)

Shadows

Derived elevation

All detected shadows

• 0 0 0 0 #dee4ff
• 10px 10px #dee4ff
• none
• 5px 5px 0 0 #dee4ff
• -2px 2px 0 0 #dee4ff
• 5px 5px #dee4ff
• -4px 4px 0 0 #dee4ff

Layout

Container max-width: 991px

Breakpoints

• 479px
• 640px
• 766px
• 767px
• 768px
• 991px
• 992px
• 993px

Animation & Motion

Transitions

• all 0.2s ease
• box-shadow .4s
• box-shadow .3s
• opacity .3s
• all .2s
• opacity .2s
• color .2s
• background-size .25s,color .25s ease

Keyframes

@keyframes spin { 0%{transform:rotate(0)}to{transform:rotate(360deg)} }

CTA labels found on page

• Get a Demo
• SEE KOI IN ACTION
• Back

Source Design Tokens (CSS custom properties)

:root {
  --bullet-size: 5px;
  --brand-colors--beige: #fbf7f0;
  --text-colors--primary-txt: var(--brand-colors--midnight-blue);
  --text-colors--accent-txt: var(--brand-colors--orange);
  --buttons-colors--border: #83311a80;
  --background-colors--white-bg: var(--brand-colors--white);
  --text-colors--alternate-txt: var(--brand-colors--bronze);
  --brand-colors--white: white;
  --text-colors--white-txt: var(--brand-colors--white);
  --buttons-colors--default: var(--brand-colors--yellow);
  --buttons-colors--shadow: var(--brand-colors--light-blue);
  --brand-colors--mine-brown: #83311a;
  --brand-colors--dark-blue: #0b0f5a;
  --background-colors--accent-bg: var(--brand-colors--orange);
  --background-colors--primary-bg: var(--brand-colors--beige);
  --background-colors--blue-bg: var(--brand-colors--blue);
  --brand-colors--midnight-blue: #050618;
  --brand-colors--ice-white: #f0f5ff;
  --brand-colors--orange: #f93f12;
  --brand-colors--timerwolf: #e0cbc6;
  --brand-colors--yellow: #fdd970;
  --text-colors--yellow-txt: var(--brand-colors--yellow);
  --transparent: #0000;
  --brand-colors--beige-dark: #fbf7f2;
  --brand-colors--off-white: #f5eee0;
  --brand-colors--bronze: #c5821e;
  --text-colors--secondary-txt: var(--brand-colors--mine-brown);
  --background-colors--off-white-bg: #f5eee0;
  --brand-colors--cornflower: #1f236d;
  --brand-colors--pale-purple: #d1d2ee;
  --brand-colors--day-fog: #f8f3ea;
  --radius-14: 14px;
  --brand-colors--almost-black: #1d1d1f;
  --brand-colors--shell: #fae2d9;
  --background-colors--secondary-bg: var(--brand-colors--ice-white);
  --brand-colors--light-blue: #dee4ff;
  --text-colors--black-txt: var(--brand-colors--black);
  --_typography---font--primary-family: "Mdnichromevariable Infra",Arial,sans-serif;
  --brand-colors--black: black;
  --_text-trim---trim-top: var(--_typography---font--secondary-trim-top);
  --brand-colors--blue: #454bbb;
  --_typography---font--primary-trim-top: .37em;
  --_text-trim---trim-bottom: var(--_typography---font--secondary-trim-bottom);
  --_typography---font--primary-trim-bottom: .35em;
  --_typography---font--secondary-family: "Season Sans",Arial,sans-serif;
  --_typography---font--secondary-trim-top: .5em;
  --_typography---font--secondary-trim-bottom: .4em;
  --text-colors--inverted-txt: var(--brand-colors--ice-white);
  --cc-font-family: -apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,Helvetica,Arial,sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol";
  --cc-modal-border-radius: .5rem;
  --cc-btn-border-radius: .4rem;
  --cc-modal-transition-duration: .25s;
  --cc-link-color: var(--cc-btn-primary-bg);
  --cc-modal-margin: 1rem;
  --cc-z-index: 2147483647;
  --cc-bg: #fff;
  --cc-primary-color: #2c2f31;
  --cc-secondary-color: #5e6266;
  --cc-btn-primary-bg: #30363c;
  --cc-btn-primary-color: #fff;
}

Do's and Don'ts

Do

• Do reserve the accent #83311A for interactive highlights and key moments — it is used sparingly on the source page.
• Do keep the canvas at #FFFFFF; surfaces should stay within the detected neutral ramp.
• Do stick to the detected font weight(s): 300, 400, 500, 600, 700.
• Do align spacing to the 4px base unit derived from the page.

Don't

• Don't introduce colors outside the detected palette — every hue above was found in the source.

Design Tokens (copy-paste)

:root {
  --color-primary: #333333;
  --color-accent: #83311A;
  --color-background: #FFFFFF;
  --color-surface: #F0F4F7;
  --color-text-primary: #000000;
  --color-secondary: #000000;
  --color-text-secondary: #DEE4FF;
  --color-border: #333333;
  --color-on-primary: #FFFFFF;
  --color-on-secondary: #FFFFFF;
  --color-on-accent: #FFFFFF;
  --color-surface-container-lowest: #FFFFFF;
  --color-surface-container-low: #F4F4F4;
  --color-surface-container: #F2F4F6;
  --color-surface-container-high: #F0F4F7;
  --color-surface-container-highest: #EAEFF2;
  --font-sans: Season Sans;
  --font-size-display: 60px;
  --font-size-headline-lg: 38px;
  --font-size-headline-md: 30px;
  --font-size-title-lg: 22px;
  --font-size-body-lg: 18px;
  --font-size-body-md: 16px;
  --font-size-label-md: 14px;
  --font-size-label-sm: 12.8px;
  --radius-sm: 4px;
  --radius-md: 6.4px;
  --radius-lg: 25px;
  --radius-pill: 100%;
  --shadow-sm: 0 0 0 0 #dee4ff;
  --shadow-md: 5px 5px 0 0 #dee4ff;
  --shadow-lg: -4px 4px 0 0 #dee4ff;
  --space-xs: 2px;
  --space-sm: 8px;
  --space-md: 16px;
  --space-lg: 32px;
  --space-xl: 62px;
  --tracking-label: .03em;
  --container-max: 991px;
}