Security News
pnpm 10.0.0 Blocks Lifecycle Scripts by Default
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
@geocortex/icons
Advanced tools
This project includes a collection of icons used by the Geocortex 5-series products.
Make sure to run
npm install
before commiting, as we automatically runsvgo
as a pre-commit hook to ensure the icons that are committed are optimized.
If you're simply adding a new icon you can place your .svg
file in the icons
directory. svgo
will be run automatically on commit to ensure that the icons are minified and stripped of unnecessary content. You can also use npm run optimize
to manually trigger a run of svgo
over all the icon files.
Important notes when adding icons:
map-marker.svg
=> map_marker.svg
<text>
, <linearGradient>
, etc.This step isn't necessary to add a new icon. This is only needed to debug issues with the CI build itself.
The project converts the .svg
icons to iOS .pdf
and Android .xml
equivalents. The build is done automatically on our CI server, but if you wish to build them locally you will need to install Docker.
To build the icons run the following command using (if not using a bash like terminal such as git-bash, you can remove the \
and convert the command to one line):
mkdir -p dist && \
docker build -t gcx-icons . && \
docker create --name gcx-icons gcx-icons && \
docker cp gcx-icons:/gcx/icons/. ./dist/ && \
docker rm gcx-icons
This command will:
Dockerfile
. This will include the converted iconsdist
folderdocker image rm gcx-icons
if you'd like to clean it upWe have made these icons available for you under the Apache License Version 2.0. The only thing we ask is that you not re-sell these icons.
FAQs
Icons for Geocortex products
We found that @geocortex/icons demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.
Research
Security News
Socket researchers have discovered multiple malicious npm packages targeting Solana private keys, abusing Gmail to exfiltrate the data and drain Solana wallets.