Research
Security News
Kill Switch Hidden in npm Packages Typosquatting Chalk and Chokidar
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
@inquirer/figures
Advanced tools
@inquirer/figures is an npm package that provides a set of common Unicode symbols for use in command-line interfaces. These symbols can be used to enhance the visual appearance of CLI applications by adding checkmarks, crosses, arrows, and other figures.
Checkmark
This feature provides a checkmark symbol (✓) that can be used to indicate success or completion in CLI applications.
const figures = require('@inquirer/figures');
console.log(figures.tick);
Cross
This feature provides a cross symbol (✖) that can be used to indicate failure or errors in CLI applications.
const figures = require('@inquirer/figures');
console.log(figures.cross);
Arrow
This feature provides a right arrow symbol (→) that can be used to indicate direction or progression in CLI applications.
const figures = require('@inquirer/figures');
console.log(figures.arrowRight);
Star
This feature provides a star symbol (★) that can be used to highlight important information or features in CLI applications.
const figures = require('@inquirer/figures');
console.log(figures.star);
The 'figures' package provides a similar set of Unicode symbols for use in command-line interfaces. It offers a wide range of symbols like checkmarks, crosses, arrows, and more. It is very similar to @inquirer/figures in terms of functionality and usage.
The 'cli-spinners' package provides a collection of spinners for use in command-line interfaces. While it focuses more on loading animations rather than static symbols, it can be used in conjunction with @inquirer/figures to enhance the visual appeal of CLI applications.
The 'log-symbols' package provides colored symbols for various log levels (info, success, warning, error). It is useful for enhancing log messages in CLI applications and can be used alongside @inquirer/figures for a more comprehensive set of symbols.
FAQs
Vendored version of figures, for CJS compatibility
The npm package @inquirer/figures receives a total of 4,284,353 weekly downloads. As such, @inquirer/figures popularity was classified as popular.
We found that @inquirer/figures demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.
Product
Socket now supports uv.lock files to ensure consistent, secure dependency resolution for Python projects and enhance supply chain security.