Research
Security News
Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
@vonage/vvd-fonts
Advanced tools
As part of the One Vonage unified branding and look'n'feel experience, we are providing a common Web fonts set. Our font loading service will load a variable fonts for any supporting platform, while falling back to the static fonts on the non-supporting ones.
Im most majority of the cases, consuming application should do nothing with regard to fonts initialization. Fonts service is automatically initialized (fonts pulled and installed into the global document scope) as part of the Vivid Core.
The only case when one needs to perform a proactive fonts service initialization, is when one used Vivid Fonts solely. In this case do:
import { init } from '@vonage/vvd-fonts';
...
init().then(() =>
// do post init stuff here
);
Pay attention: while fonts service installs the fonts, it is NOT auto applying them to any native HTML element. To apply Vivid fonts in your application please refer to Vivid Context service documentation.
We are initializing fonts asynchronously. This approach won't block site's contents rendering, so you'll most likely to experience FOUC behaviour. There are few things to do about it. First, we suggest employing some kind of loading veil on web application start up. This is a well-known practice and is already in use in some of Vonage's application.
Additionally, we suggest to 'decorate' your main HTML with the following optimization hints:
<link rel="preload" crossorigin
href="//fonts.resources.vonage.com/fonts/v1/Spezia_Web_Complete_Upright.woff2"
as="font"
type="font/woff2">
<link rel="prefetch" crossorigin
href="//fonts.resources.vonage.com/fonts/v1/Spezia_Web_Monospace_Complete.woff2"
as="font"
type="font/woff2">
Explanation:
preload
, says to browser that it MUST load our basic, used everywhere font immediatelly.
While this will still be performed asyncronously, it'll prioritize our main font resource high.prefetch
, hints the browser to load our secondary, monospace font, sooner than later.Attention! We've found, that
preload
andprefetch
are not supported in Safari (up and include 14), specifially some inconsistensies found when browsing from and betweeniframe
elements. Althoughiframe
usage is quite rare nowadays, if there is any chance that some HTML will find itself loaded viaiframe
, please do not use the above hints as of now.
2.19.0 (2021-10-04)
FAQs
Vivid fonts initialisation service
The npm package @vonage/vvd-fonts receives a total of 488 weekly downloads. As such, @vonage/vvd-fonts popularity was classified as not popular.
We found that @vonage/vvd-fonts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A threat actor's playbook for exploiting the npm ecosystem was exposed on the dark web, detailing how to build a blockchain-powered botnet.
Security News
NVD’s backlog surpasses 20,000 CVEs as analysis slows and NIST announces new system updates to address ongoing delays.
Security News
Research
A malicious npm package disguised as a WhatsApp client is exploiting authentication flows with a remote kill switch to exfiltrate data and destroy files.