
Research
/Security News
npm Author Qix Compromised via Phishing Email in Major Supply Chain Attack
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
@collab-ui/webfonts-generator
Advanced tools
This webfonts generator takes SVG icons and transform them to WOFF and WOFF 2 fonts.
Developed specifically for the needs of Cisco's Momentum design system, this project is quite opinionated but open to features request and PRs nonetheless.
Despite being written from scratch, this project was inspired by the (now archived) project webfonts-generator project.
async/await).svgicons2svgfont, svg2ttf, ttf2woff and ttf2woff2).const { generateFonts } = require("@collab-ui/webfonts-generator");
generateFonts("My Awesome Font", "icons/*.svg", "fonts").then(result => {
console.log(`Webfont ${result.fontName} created!`);
console.log(`WOFF file: ${result.fontFiles.woff}`);
console.log(`WOFF2 file: ${result.fontFiles.woff2}`);
console.log(`Glyphs information:`, result.glyphsData);
});
TBD
FAQs
Modern webfonts generator from SVG icons
The npm package @collab-ui/webfonts-generator receives a total of 5 weekly downloads. As such, @collab-ui/webfonts-generator popularity was classified as not popular.
We found that @collab-ui/webfonts-generator demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.

Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.

Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.