
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@automattic/material-design-icons
Advanced tools
This package currently only provides Material icon SVGs required by the Calypso
nav drawer. The official material-design-icons package (https://github.com/google/material-design-icons)
is generally quite out-dated. It also includes many image formats that are not
relevant to Calypso.
As we adopt Material icons more widely, it will probably be worthwhile to fully populate this package with all the available icons. Alternatively, we could seek out an alternative distribution of the icons.
We use svgr to load SVG files and convert them to React components:
import { ReactComponent as SvgExample } from './test.svg';
<SvgExample />;
To add more icons, you'll have to download individual icons to the appropriate directories, then rebuild and commit the updated sprites file:
Search for an icon in the official repository, minding the style (like outline)
Select an icon, and download the corresponding SVG file with black as color
Beware that the default style and size for the
MaterialIconclass isoutlineand24
Move that SVG file in the sub-folder matching the category of that icon
The category should be one of the categories listed in the select box of the search form
Rebuild material-icons.svg by running:
yarn workspace @automattic/material-design-icons run build
FAQs
Material icons in SVG format.
We found that @automattic/material-design-icons demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 50 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.