Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
github.com/speedata/textlayout
This module provides a chain of tools to layout text. It is mainly a port of the C libraries harfbuzz and graphite.
This repository is a shallow copy of https://github.com/benoitkugler/textlayout. All credits go to Benoit KUGLER and others (see the detailed history).
As of v0.1.0, the content of this repository has been split, with higher level, more experimental packages moved to textprocessing.
The remaining packages are the more stable, low level logic used by go-text.
As of v0.1.1, the font files only used for internal tests have been moved in a separate module, so that regular builds do not have to download these large files (this requires go1.17 for module lazy loading).
The package fonts provides the low level primitives to load and read font files. Once a font is selected, harfbuzz is responsible for laying out a line of text, that is transforming a sequence of unicode points (runes) to a sequence of positioned glyphs. Graphite fonts are supported via the graphite package. Some higher level library may wrap these tools to provide an interface capable of laying out an entire text.
This project is a work in progress. Some parts of it are already usable : fonts/truetype, harfbuzz and graphite, but breaking changes may be committed on the fly.
This module is provided under the MIT license.
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.