
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
firacode-xq
Advanced tools
Programmers use a lot of symbols, often encoded with several characters. For the human brain, sequences like ->, <= or := are single logical tokens, even if they take two or three characters on the screen. Your eye spends a non-zero amount of energy to scan, parse and join multiple characters into a single logical one. Ideally, all programming languages should be designed with full-fledged Unicode symbols for operators, but that’s not the case yet.
Fira Code is an extension of the Fira Mono font containing a set of ligatures for common programming multi-character combinations. This is just a font rendering feature: underlying code remains ASCII-compatible. This helps to read and understand code faster. For some frequent sequences like .. or //, ligatures allow us to correct spacing.
Ruby:
JavaScript:
PHP:
Erlang:
Elixir:
Go:
LiveScript:
Clojure:
Swift:
| Works | Doesn’t work |
|---|---|
| Butterfly | Alacritty |
| Hyper.app | cmd.exe |
| iTerm 2 (since 3.1) | Cmder |
| Kitty | ConEmu |
| Konsole | GNOME Terminal |
| QTerminal | mate-terminal |
| Terminal.app | mintty |
| Termux | PuTTY |
| Token2Shell/MD | rxvt |
| upterm | ZOC (Windows) |
| ZOC (macOS) | gtkterm, guake, LXTerminal, sakura, Terminator, xfce4-terminal, and other libvte-based terminals (bug report) |
| Works | Doesn’t work |
|---|---|
| Abricotine | Arduino IDE |
| Android Studio (2.3+, instructions) | Adobe Dreamweaver |
| Anjuta (unless at the EOF) | Delphi IDE |
| AppCode (2016.2+, instructions) | Eclipse (Win, vote here) |
| Atom 1.1 or newer (instructions) | Standalone Emacs (workaround) |
| BBEdit/TextWrangler (v. 11 only, instructions) | gVim (Windows workaround) |
| Brackets (with this plugin) | IDLE |
| Chocolat | KDevelop 4 |
| CLion (2016.2+, instructions) | Monkey Studio IDE |
| Cloud9 (instructions) | |
| Coda 2 | |
| CodeLite | |
| Eclipse (Mac 4.7+, Linux) | |
| Geany | |
| gEdit / Pluma | |
| GNOME Builder | |
| IntelliJ IDEA (2016.2+, instructions) | |
| Kate, KWrite | |
| Komodo | |
| Leafpad | |
| LibreOffice | |
| LightTable (instructions) | |
| LINQPad | |
| MacVim 7.4 or newer (instructions) | |
| Mancy | |
| Meld | |
| Mousepad | |
| NeoVim-gtk | |
| NetBeans | |
| Notepad (Win) | |
| Notepad++ (with a workaround) | |
| PhpStorm (2016.2+, instructions) | |
| PyCharm (2016.2+, instructions) | |
| QtCreator | |
| Rider | |
| RStudio (instructions) | |
| RubyMine (2016.2+, instructions) | |
| Scratch | |
| SublimeText (3146+) | |
| Spyder IDE (only with Qt5) | |
| SuperCollider 3 | |
| TextAdept (Linux, Mac) | |
| TextEdit | |
| TextMate 2 | |
| VimR (instructions) | |
| Visual Studio 2015 | |
| Visual Studio 2017 | |
| Visual Studio Code (instructions) | |
| WebStorm (2016.2+, instructions) | |
| Xamarin Studio/Monodevelop | |
| Xcode (8.0+, otherwise with plugin) | |
| Probably work: Smultron, Vico | Under question: Code::Blocks IDE |
<!-- HTML -->
<link rel="stylesheet" href="https://cdn.rawgit.com/tonsky/FiraCode/1.205/distr/fira_code.css">
/* CSS */
@import url(https://cdn.rawgit.com/tonsky/FiraCode/1.205/distr/fira_code.css);
font-feature-settings: "calt" 1;font-variant-ligatures: contextual;)Other monospaced fonts with ligatures:
FAQs
Fira Code: monospaced font with programming ligatures
We found that firacode-xq demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.