
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
#Fontina
Fontina make your fonts ready for @font-face!
Fontina generates .ttf, .otf, .svg, .woff, .eot fonts from a font supported by fontforge.
A stylesheet will be created as well.
##Requirements
Before using fontina you need to install:
##Basic usage
Install it:
npm install --save grunt-fontina
Write this:
var fontina = require('fontina');
var options = {};
fontina('./fonts/font.ttf', './public/fonts', options);
Fontina will do the rest.
The options object can be configured as follow:
{
force: false, // if true the file extension won't be checked
output: false, // if true the output from the tool will be printed
error: false, // if true the errors from the tool will be printed
cwd: null // current directory from which the tools are run
}
##Integration with Grunt
Install grunt-fontina to automate your workflow.
npm install --save grunt-fontina
Load a new task in your Gruntfile.js:
grunt.loadNpmTasks('grunt-fontina');
Add a configuration block for fontina:
fontina: {
fonts: {
src: './fonts', // Source directory
dest: './public/fonts', // Output directory
options: { // Fontina options object
output: true
}
}
}
##Why
I've always hated using an external service just to get my font ready.
It breaks your workflow and you have to do it every time you add a font.
##License MIT
FAQs
Make your fonts ready for @font-face
We found that fontina demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.