
Research
/Security News
Shai Hulud Strikes Again (v2)
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.
@nycopportunity/pttrn-plugin-feather
Advanced tools
A plugin script for the @NYCOpportunity Pattern CLI that will compile a feather icon sprite from the source.
This command plugin will compile a SVG icon sprite from the Feather Icon set.
Install as a development dependency in a project that uses the Patterns CLI.
$ npm install @nycopportunity/pttrn-plugin-feather -D
Add a proxy command script in the ./bin/ directory:
$ touch bin/feather.js
$ echo "module.exports = require('@nycopportunity/pttrn-plugin-feather');"
This will make the command available to the CLI. Compile the sprite by running:
$ npx pttrn feather
$ ✨ Feather sprite written to ./dist/svg/feather.svg
An optional config file can be added with the following options:
| Option | Description |
|---|---|
src | The source directory for Feather icons. |
dist | The distribution path and file name for the compiled sprite. |
ext | The extension name for the icons files (this shouldn't change). |
prefix | The prefix to add to the <svg> element ID attribute. |
Config Sample
const path = require('path');
module.exports = {
'src': path.join(process.env.PWD, 'node_modules/feather-icons/dist/icons'),
'dist': path.join(process.env.PWD, 'dist', 'svg', 'feather.svg'),
'ext': '.svg',
'prefix': 'feather-'
};
FAQs
A plugin script for the @NYCOpportunity Pattern CLI that will compile a feather icon sprite from the source.
We found that @nycopportunity/pttrn-plugin-feather demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Another wave of Shai-Hulud campaign has hit npm with more than 500 packages and 700+ versions affected.

Product
Add real-time Socket webhook events to your workflows to automatically receive software supply chain alert changes in real time.

Security News
ENISA has become a CVE Program Root, giving the EU a central authority for coordinating vulnerability reporting, disclosure, and cross-border response.