
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
@heroku/ember-malibu-icon
Advanced tools
This Ember addon injects the Malibu svg sprite into your Ember application and provides a helper to insert icons into your templates. You can explore how this helper works in this addon's demo app and documentation.
Note that it will be helpful if you also use Purple 3 for styling
ember install --save @heroku/ember-malibu-icon
By default this addon will inject the latest
version of Malibu. Consumers can configure this in their application's config/environment.js
file
ENV['ember-malibu-icon'] = {
malibuVersion: '1.3.0'
}
Accessibility When rendering MalibuIcon
, you must declare the icon as either:
@title
argument. This will read the text to the screenreader instead of being announced as "Image".role="presentation"
to the component. This will hide the icon from assistive technology. This should only be used for icons that don't convey additional meaning and are being used for aesthetic/design reasons.Use this when when you want text to be announced to the screenreader. This is most common when you have icons that are used for buttons or links but lack text rendered next to the icon to describe it.
<MalibuIcon @title="Add Buildpack {{buildpackName}}" @size="28" @iconClass="gradient-dark-gray" @name="app-28" />
For example:
Given this screenshot, note the pencil icon. There is no text next to it to describe its intended purpose to the screenreader (in this case, "Edit"). @title="Edit {{domain}}"
would be an improvement in this scenario.
Use this when the icon does not convey additional meaning. There should be visual text accompanying the icon. Never use this when only the icon is rendered.
For example:
In this example, the GitHub logo is "presentational" because it does not convey additional meaning not already presented to the user via the "GitHub" text next to it.
<MalibuIcon @size="28" @iconClass="gradient-dark-gray" @name="app-28" role="presentation" />
import { malibuIcon } from '@heroku/ember-malibu-icon/helpers/malibu-icon';
malibuIcon({
name: 'app-16',
size: 16,
iconClass: 'v-mid gradient-purple',
title='Optional Title'
})
git clone https://github.com/heroku/ember-malibu-icon
cd ember-malibu-icon
yarn
ember serve
yarn test
(Runs ember try:each
to test your addon against multiple Ember versions)ember test
ember test --server
ember build
For more information on using ember-cli, visit https://ember-cli.com/.
This library does its best to follow the principles of Semantic Versioning. Every effort should be made to ensure all non-major versions are released in a backwards compatible way.
Once you are ready to make a new release follow these steps:
package.json
Publish your new version to npm with the command npm publish
🎉
Note that you must have publish access to the @heroku npm organization to successfully publish
FAQs
Ember Malibu Icons
We found that @heroku/ember-malibu-icon demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 151 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.