Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@dimfeld/svelte-awesome
Advanced tools
Awesome SVG icon component for Svelte JS, built with Font Awesome icons. Based on Justineo/vue-awesome
Svelte-Awesome supports Font-Awesome v4.7.0
(icons inbuilt) and v5
(via @fortawesome
npm packages)
A demo is available here
$ npm install --save svelte-awesome
<!-- basic -->
<Icon data={beer}></Icon>
<!-- with options -->
<Icon data={refresh} scale="2"></Icon>
<Icon data={comment} flip="horizontal"></Icon>
<Icon data={codeFork} label="Forked Repository"></Icon>
<!-- stacked icons [WIP] -->
<Icon label="No Photos">
<Icon data={camera}></Icon>
<Icon name={ban} scale="2" class="alert"></Icon>
</Icon>
<!-- FontAwesome v5 Icons!! -->
<Icon data={faThumbsUp}></Icon>
<script>
import { beer, refresh, comment, codeFork, camera, ban } from 'svelte-awesome/icons';
import { faThumbsUp } from '@fortawesome/free-regular-svg-icons';
</script>
v2.3.1 - 2021-03-29
#681
#671
#666
#669
#667
#668
#665
#661
#664
#663
#662
#660
#659
#609
dc85158
67818e6
bb554ab
84def6e
066abdc
d03e3d5
79395e9
60e4616
5463b30
12c02b0
84bc47a
7cdb981
bdc24d0
8569625
88fe39d
074241e
45e9cc0
37ace68
f9f24eb
0b0c9ae
f3a93e3
1333b4a
fc3479f
0b9ebf2
f980442
575c161
948a0f7
26f3cb0
a8a04a8
aaa72e4
37a11ce
f37738d
116f898
44d1b2e
9e5dd46
d5f1e82
520dffa
3da3602
9d8f0d2
2dbf5b8
945d157
e2b75dc
8812808
a8c5bbf
acb19dc
96293af
95ba041
075982c
FAQs
Font Awesome component for Svelte JS, using inline SVG
We found that @dimfeld/svelte-awesome demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.