Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
@mdi/font-build
Advanced tools
Goal: Build the Material Design Icons SVG icons to a webfont.
Most notably this generates @mdi/font
, but is written to allow others to add custom icons or tweak the output.
By installing @mdi/font-build
globally one can generate their own webfont build.
# Install Globally
npm install -g @mdi/font-build
# Reads config from font-build.json
font-build
To run without installing use
npx @mdi/font-build
Any version of @mdi/svg
v3.9.95+ will work with no changes. For earlier versions copy the font-build.json
and update the version: { major: 3, minor: 9, patch: 95 }
values.
Download from MaterialDesign-SVG
font-build --help
explains all the possible overrides.
meta.json
font-build.json
svg/
account.svg
...
font-build
is ran in the root of this folder.
The output is essentially the @mdi/font
package that is released to NPM and the CDN after every release. These are built to target IE11+.
dist/
css/
materialdesignicons.css
materialdesignicons.css.map
materialdesignicons.min.css
materialdesignicons.min.css.map
fonts/
materialdesignicons-webfont.eot
materialdesignicons-webfont.ttf
materialdesignicons-webfont.woff
materialdesignicons-webfont.woff2
scss/
materialdesignicons.scss
_animated.scss
_core.scss
_extras.scss
_functions.scss
_icons.scss
_paths.scss
_variables.scss
index.html
The .svg
format is very heavy font format not used by modern browsers, but it can be included. Simply append the --fontSvg
flag.
font-build --fontSvg
Please let us know if you need any features beyond the current CLI options by opening an issue.
webfont
Package is Amazing!99% of this is thanks to the https://www.npmjs.com/package/webfont package. They really have done amazing work.
FAQs
Material Design Icons webfont builder.
The npm package @mdi/font-build receives a total of 22 weekly downloads. As such, @mdi/font-build popularity was classified as not popular.
We found that @mdi/font-build demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.