
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
@procore/core-illustrations
Advanced tools
Illustration set for Procore Core components. SVG illustration components generated from the Procore Figma design file.
Illustrations are expressive visuals used for empty states, onboarding, and feature introductions. They are not icons — use them sparingly and intentionally. Current desktop usage: Empty states, zero-data screens, onboarding flows, and feature marketing surfaces.
yarn add @procore/core-illustrations
import { IllustrationExample } from '@procore/core-illustrations'
// Default size: 240px
<IllustrationExample />
// Size variants: 'sm' (160px) | 'md' (240px) | 'lg' (320px)
<IllustrationExample size="lg" />
Components render an img tag that load a svg file separately. This has reuse benefits in builds and runtime for better performance. The illustrations cannot be modifed with CSS or JS. Always maintain a 1:1 aspect ratio, never stretch or distort.
Empty state illustrations are considered decorative images and have adjacent visible text with the information. The images have an empty alt tag to intentionally be ignored by assistive technology.
Sourced from the foundation figma file.
.env.sample to .env and fill in FIGMA_TOKENyarn update
Review the update (yarn storybook) and commit changes.
FAQs
Illustration set to be used for all core components
The npm package @procore/core-illustrations receives a total of 13 weekly downloads. As such, @procore/core-illustrations popularity was classified as not popular.
We found that @procore/core-illustrations demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 308 open source maintainers collaborating on the project.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.

Company News
Allow myself to introduce... myself.