Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Clarity City is an open source sans-serif typeface. It is the default font for the VMware Clarity Design System.
We have provided the files in OpenType, TrueType, and WebFont (EOT, WOFF, WOFF2) file formats.
Please use GitHub issues for reporting problems, and before submitting contributions please open an issue to discuss your proposed changes. We will consider contributions, though we aim to keep a very stable font and limit releases to essential changes and fixes.
We are not a type foundry, and while we are releasing this as an open source project our ability to make changes is limited. We work with partners to make improvements over time, so changes and feedback may take longer to implement.
Please be respectful of others and follow our code of conduct.
Licensed under Open Font License (OFL). See LICENSE.
Clarity City is based upon the work done by @chrismsimpson on Metropolis.
FAQs
Clarity City Typeface
The npm package @clr/city receives a total of 4,040 weekly downloads. As such, @clr/city popularity was classified as popular.
We found that @clr/city demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.