Security News
GitHub Removes Malicious Pull Requests Targeting Open Source Repositories
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
@vonage/vvd-fonts
Advanced tools
As part of the One Vonage unified branding and look'n'feel experience, we are providing a common Web fonts set. Our font loading service will load a variable fonts for any supporting platform, while falling back to the static fonts on the non-supporting ones.
Im most majority of the cases, consuming application should do nothing with regard to fonts initialization. Fonts service is automatically initialized (fonts pulled and installed into the global document scope) as part of the Vivid Core.
The only case when one needs to perform a proactive fonts service initialization, is when one used Vivid Fonts solely. In this case do:
import fonts from '@vonage/vvd-fonts';
...
fonts.init().then(() =>
// do post init stuff here
);
Pay attention: while fonts service installs the fonts, it is NOT auto applying them to any native HTML element. To apply Vivid fonts in your application please refer to Vivid Context service documentation.
We are initializing fonts asynchronously. This approach won't block site's contents rendering, so you'll most likely to experience FOUC behaviour. There are few things to do about it. First, we suggest employing some kind of loading veil on web application start up. This is a well-known practice and is already in use in some of Vonage's application.
Additionally, we suggest to 'decorate' your main HTML with the following optimization hints:
<link rel="preload" crossorigin
href="//fonts.resources.vonage.com/fonts/v1/Spezia_Web_Complete_Upright.woff2"
as="font"
type="font/woff2">
<link rel="prefetch" crossorigin
href="//fonts.resources.vonage.com/fonts/v1/Spezia_Web_Monospace_Complete.woff2"
as="font"
type="font/woff2">
Explanation:
preload
, says to browser that it MUST load our basic, used everywhere font immediatelly.
While this will still be performed asyncronously, it'll prioritize our main font resource high.prefetch
, hints the browser to load our secondary, monospace font, sooner than later.Attention! We've found, that
preload
andprefetch
are not supported in Safari (up and include 14), specifially some inconsistensies found when browsing from and betweeniframe
elements. Althoughiframe
usage is quite rare nowadays, if there is any chance that some HTML will find itself loaded viaiframe
, please do not use the above hints as of now.
2.2.2 (2021-03-19)
Note: Version bump only for package @vivid/root
FAQs
Vivid fonts initialisation service
The npm package @vonage/vvd-fonts receives a total of 470 weekly downloads. As such, @vonage/vvd-fonts popularity was classified as not popular.
We found that @vonage/vvd-fonts demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
GitHub removed 27 malicious pull requests attempting to inject harmful code across multiple open source repositories, in another round of low-effort attacks.
Security News
RubyGems.org has added a new "maintainer" role that allows for publishing new versions of gems. This new permission type is aimed at improving security for gem owners and the service overall.
Security News
Node.js will be enforcing stricter semver-major PR policies a month before major releases to enhance stability and ensure reliable release candidates.