Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
The package of IBM’s new typeface, IBM Plex, and accompanying typography code.
The package of IBM’s new typeface, IBM Plex, and accompanying typography code.
Warning: IBM Type is still in development and being carefully implemented in real cases where we can look for any difficulties. Look out for a stable v1.0.0 release in the near future.
Use these artboards in your Sketch files to accomplish a design at each breakpoint your developer will be working with. Right click and select Save link as
to save this Sketch file.
The IBM Type code provides rendering and kerning that best reflects IBM Plex. The editorial and product style sets also take care of:
At the moment, installation requires Node.js and npm. This will change by v1.0.0 when a CDN become available.
To install, run npm install @ibm/type
If you want to use the compiled css, reference the file in the css folder:
<link rel="stylesheet" type="text/css" href="node_modules/@ibm/type/css/ibm-type.min.css">
Classname | Purpose |
---|---|
.ibm | Container div to apply IBM Plex Sans to all type by default |
.ibm-type-mono | Switch a text node and children to IBM Plex Mono |
.ibm-type-serif | Switch a text node and children to IBM Plex Serif |
.ibm-type-light | Use the light weight of either IBM Plex Sans or IBM Plex Serif |
.ibm-type-semibold | Use the semibold weight of either IBM Plex Sans or IBM Plex Serif |
.ibm-type-italic | Use the italic style of either IBM Plex Sans or IBM Plex Serif |
.ibm-type-[a, b, c, d, f, i, j, k] | Use the sizing and weight of a style prescribed for editorial experiences |
.ibm-type-[a, b, c, d, e, g, h] | Use the sizing and weight of a style prescribed for product experiences |
ibm-type.css | ibm-type.min.css | Gzipped |
---|---|---|
35kb | 31kb | 3kb |
Finally, each font file (~40kb) has been split into four separate files (~10kb). If your webpage does not use any unicodes from one of the four split files, the user’s device will not have to download the split file.
FAQs
The package of IBM’s new typeface, IBM Plex, and accompanying typography code.
We found that @ibm/type demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.