
Security News
Rust RFC Proposes a Security Tab on crates.io for RustSec Advisories
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.
@artsy/icons
Advanced tools
[@artsy/icons](https://github.com/artsy/icons) is the canonical source for icons used at Artsy, and serves as an automatic build pipeline for generating JSX representations of `.svg` sources that can easily be imported into React apps.
@artsy/icons is the canonical source for icons used at Artsy, and serves as an automatic build pipeline for generating JSX representations of .svg sources that can easily be imported into React apps.
You can view available icons here and click to copy the import path of the desired icon.
artsy/icons#main are automatically deployed to NPMyarn add @artsy/icons
And then later, import icons like so for web:
import ArtsyLogo from "@artsy/icons/ArtsyLogo"
const MyApp = () => {
return <ArtsyLogo />
}
Or for React Native:
import { ArtsyLogo } from "@artsy/icons/native"
const MyApp = () => {
return <ArtsyLogo />
}
Alternatively, visit the docs and select individual icons, which will copy the import path to your clipboard.
We've setup the repo so that adding new icons and publishing to NPM is as automated as can be:
git clone https://github.com/artsy/icons.gitgit checkout -b add-new-icon.svg file into the src folder (and follow pre-existing naming conventions! :pray:)minor label indicating a new feature additionyarn build && yarn docs to test the new iconyarn install
yarn build
yarn docs
FAQs
[@artsy/icons](https://github.com/artsy/icons) is the canonical source for icons used at Artsy, and serves as an automatic build pipeline for generating JSX representations of `.svg` sources that can easily be imported into React apps.
We found that @artsy/icons demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Rust’s crates.io team is advancing an RFC to add a Security tab that surfaces RustSec vulnerability and unsoundness advisories directly on crate pages.

Security News
/Research
Socket found a Rust typosquat (finch-rust) that loads sha-rust to steal credentials, using impersonation and an unpinned dependency to auto-deliver updates.

Research
/Security Fundamentals
A pair of typosquatted Go packages posing as Google’s UUID library quietly turn helper functions into encrypted exfiltration channels to a paste site, putting developer and CI data at risk.