Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
github.com/benoitkugler/textlayout
This module provides a chain of tools to layout text. It is mainly a port of the C libraries harfbuzz and graphite.
This project has been merged into go-text/typesetting and this repository will not be maintained anymore : developpement will happen in the go-text repo. All users should use go-text instead, unless if they require support for old Type1 or Linux Bitmap fonts.
As of v0.1.0, the content of this repository has been split, with higher level, more experimental packages moved to textprocessing. The remaining packages are the more stable, low level logic used by go-text.
As of v0.1.1, the font files only used for internal tests have been moved in a separate module, so that regular builds do not have to download these large files (this requires go1.17 for module lazy loading).
The package fonts provides the low level primitives to load and read font files. Once a font is selected, harfbuzz is responsible for laying out a line of text, that is transforming a sequence of unicode points (runes) to a sequence of positionned glyphs. Graphite fonts are supported via the graphite package. Some higher level library may wrap these tools to provide an interface capable of laying out an entire text.
This project is a work in progress. Some parts of it are already usable : fonts/truetype, harfbuzz and graphite, but breaking changes may be committed on the fly.
This module is provided under the MIT license.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.