
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@ibm/plex-mono
Advanced tools
Please download the latest zip files from our releases page for installation.
This project contains the following for web development:
We only include .woff2 and .woff files due to NPM package size limitation.
Installation with Node.js®:
npm install @ibm/plex-mono
Manually installing the files for web development can be done by downloading the latest web zip from our releases page.
Developers using the CSS files should keep the directory structure as is, so the font files will be found. If you’re importing the SCSS files, you can set the path of the font files by declaring $font-prefix: 'font-path-prefix' inside the @use. For example:
@use '@ibm/plex-mono/scss' as PlexMono with (
$font-prefix: 'font-path'
);
@include PlexMono.all();
We provide two ways of importing weights into your project. Using PlexMono.all() will import all available weights and PlexMono.default() will import only light, regular and semibold weight. You can also disable unwanted weights inside the @use. For example:
// Disable weights
@use '@ibm/plex-mono/scss' as PlexMono with (
$font-weights: (
bold: false,
boldItalic: false,
extralight: false,
extralightItalic: false,
italic: false,
light: false,
lightItalic: false,
medium: false,
mediumItalic: false,
regular: false,
semibold: false,
semiboldItalic: false,
text: false,
textItalic: false,
thin: false,
thinItalic: false
)
);
@include PlexMono.all();
IBM Plex Mono typeface weights map:
| Weight | Enabled by default with | PlexMono.all() | PlexMono.default() |
|---|---|---|---|
| bold | ✅ | ✅ | |
| boldItalic | ✅ | ❌ | |
| extralight | ✅ | ❌ | |
| extralightItalic | ✅ | ❌ | |
| italic | ✅ | ❌ | |
| light | ✅ | ❌ | |
| lightItalic | ✅ | ❌ | |
| medium | ✅ | ❌ | |
| mediumItalic | ✅ | ❌ | |
| regular | ✅ | ✅ | |
| semibold | ✅ | ✅ | |
| semiboldItalic | ✅ | ❌ | |
| text | ✅ | ❌ | |
| textItalic | ✅ | ❌ | |
| thin | ✅ | ❌ | |
| thinItalic | ✅ | ❌ |
Below are the font-family rules for the family:
font-family: 'IBM Plex Mono';
To build binary font files from .vfb sources you need FontLab Studio 5. A Python script called IBM Plex export FDK files.py is necessary to export the proper files from FontLab. To run this script you’ll need the RoboFab library. Also, you’ll need to have the Adobe Font Development Kit for OpenType (AFDKO) installed.
From FontLab, run IBM Plex export FDK files.py and choose a directory with IBM Plex .vfb source files. The script will create a new directory called fdk in which subdirectories are created for every font. The script will export files necessary for AFDKO in those subdirectories.
Subsequently, OpenType Fonts (OTFs) or TrueType Fonts (TTFs) can be generated from the command line using makeotf, which is part of the AFDKO toolset. Information and usage instructions can be found by executing makeotf -h.
This package uses IBM Telemetry to collect de-identified and anonymized metrics data. By installing this package as a dependency you are agreeing to telemetry collection. To opt out, see Opting out of IBM Telemetry data collection. For more information on the data being collected, please see the IBM Telemetry documentation.
FAQs
The package of IBM’s typeface, IBM Plex Mono
The npm package @ibm/plex-mono receives a total of 144,401 weekly downloads. As such, @ibm/plex-mono popularity was classified as popular.
We found that @ibm/plex-mono demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 25 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.