Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
currency-flags
Advanced tools
This package outputs two CSS files (minified and unminified) with classes for currency codes.
Major version bump: Note that v3 of this library no longer inlines the images with base64 encoding, instead referencing them by wise.com asset URL. To continue self-hosting images, please stay on v2.
1. Install
npm install --save currency-flags
2. Add CSS to page
3. Use
<div class="currency-flag currency-flag-usd"></div>
The currency-flag
selector has a default display
of inline-block
, size of 24x16
and a background-size
of cover
.
currency-flag-sm
, currency-flag-lg
and currency-flag-xl
modifiers are available.
While the main CSS file no longer references them, the source images for the rectangular flags are available in src/flags/${currency_code}.png
.
48x32
) png
files to static-assetssrc/styles.css
for the new currency, referencing the static asset URL.package.json
according to semver and add an item that a release will be based on to CHANGELOG.md
. npm install
to ensure the correct version in the lockfile.package.json
.FAQs
Flags for currency codes.
The npm package currency-flags receives a total of 2,903 weekly downloads. As such, currency-flags popularity was classified as popular.
We found that currency-flags demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.