Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@carbon/pictograms-react
Advanced tools
React components for pictograms in digital and software products using the Carbon Design System
React components for pictograms in digital and software products using the Carbon Design System
To install @carbon/pictograms-react
in your project, you will need to run the
following command using npm:
npm install -S @carbon/pictograms-react
If you prefer Yarn, use the following command instead:
yarn add @carbon/pictograms-react
You can import a pictogram component into your project by referring to its name:
import { Airplane } from '@carbon/pictograms-react';
We also provide CommonJS and UMD files in the lib
and umd
directories,
respectively.
To import using CommonJS, you can do the following:
const { Airplane } = require('@carbon/pictograms-react');
Note: if you would like to find the import path for a pictogram, you can reference our Pictogram Library
All icons from the library support being styled by the fill
property. You can
change the color of an icon by passing in a custom class name that sets this
property (preferred), or by passing in an inline style. For example:
// CSS custom class name to set the fill of the icon to `rebeccapurple`
svg.my-custom-class {
fill: rebeccapurple;
}
import { Airplane } from '@carbon/pictograms-react';
function MyComponent() {
return (
<button>
<Airplane aria-label="Add" className="my-custom-class" />
</button>
);
}
aria-label
By default, the icon components from @carbon/pictograms-react
are treated as
decorative content. This means that we set aria-hidden="true"
unless certain
props are passed to the component.
If you would like the icon to be announced by a screen reader, you can supply an
aria-label
or aria-labelledby
. For example:
import { Airplane } from '@carbon/pictograms-react';
function MyComponent() {
return (
<button>
<Airplane aria-label="Add" />
</button>
);
}
Doing this will add the appropriate role
to the <svg>
node, as well.
If you would like the <svg>
to receive focus, you will need to pass in a
tabIndex
value. For example:
import { Airplane } from '@carbon/pictograms-react';
function MyComponent() {
return <Airplane aria-label="Add" tabIndex="0" />;
}
Including tabIndex
and aria-label
(or aria-labelledby
) will set the
corresponding tabindex
on the underlying <svg>
and verify support in older
browsers like Internet Explorer 11 by setting focusable
to true
.
We're always looking for contributors to help us fix bugs, build new features, or help us improve the project documentation. If you're interested, definitely check out our Contributing Guide! 👀
Licensed under the Apache 2.0 License.
This package uses IBM Telemetry to collect de-identified and anonymized metrics data. By installing this package as a dependency you are agreeing to telemetry collection. To opt out, see Opting out of IBM Telemetry data collection. For more information on the data being collected, please see the IBM Telemetry documentation.
FAQs
React components for pictograms in digital and software products using the Carbon Design System
We found that @carbon/pictograms-react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.