
Product
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable Dependencies
A safer, faster way to eliminate vulnerabilities without updating dependencies
org.webjars.npm:material-design-icons-iconfont
Advanced tools

MDIDX (this repository) is a ~fork (+ fixes) of Google's Material Design icons repository. Sadly, Google allocates low maintenance and low support for issues reported by software developers having trouble using the Material Design icons library.
MDIDX helps modern web developers to use and include the (awesome) Material Design icons library in their project.
using npm
npm install material-design-icons-iconfont --save
Using scss
Import fonts and variables in your project
$material-design-icons-font-directory-path: '~material-design-icons-iconfont/dist/fonts/';
@import '~material-design-icons-iconfont/src/material-design-icons';
Customize your own classes
access material variable with Sass mixins:
.my-face {
@include material-icon('face');
}
# or
.my-face:before {
content: material-icons-content('face');
}
Performance -
When you checkout Google's original repository ( via git, npm and bower) you experience an unwanted delay. This checkout delay is caused by thousands of separate source graphic svg,png,... files.
Needless to say that these file are irrelevant for the average developer's purposes and cause build congestion (especially when using in CI systems)
In this fork all irrelevant files have been removed while keeping only the required files.
SCSS Support - Modern developers need support for scss. You can customize the referenced font's files filename and path
Maintenance - The original repository's release has missing icons that should be included according to https://material.io/tools/icons

Configure environment
Install nodejs on your environemt (> 7.6 for async await)
running build
npm install
npm run build
FAQs
WebJar for material-design-icons-iconfont
We found that org.webjars.npm:material-design-icons-iconfont demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Product
A safer, faster way to eliminate vulnerabilities without updating dependencies

Product
Reachability analysis for Ruby is now in beta, helping teams identify which vulnerabilities are truly exploitable in their applications.

Research
/Security News
Malicious npm packages use Adspect cloaking and fake CAPTCHAs to fingerprint visitors and redirect victims to crypto-themed scam sites.