Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
By Sarah Gooding - Sep 18, 2026
New:Microsoft Teams Notifications Are Now Available in Socket.Learn more →
fontkitten
Advanced tools
fontkitten
A smaller font file parser
Fontkitten is a font data library, focused on font file parsing and metadata extraction.
- 22x smaller install size than
fontkit - 3x smaller bundle size than
fontkit - Drop-in replacement for the supported APIs
- Built-in TypeScript types
Based on the fontkit package, Fontkitten aims to offer a lighter weight alternative for projects that do not require the full feature set of fontkit.
See “Differences from Fontkit” for full details of changed APIs.
Documentation
License
MIT
Keywords
FAQs
A lightweight font data library — fontkit’s little sibling
The npm package fontkitten receives a total of 3,324,673 weekly downloads. As such, fontkitten popularity was classified as popular.
We found that fontkitten demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Package last updated on 16 Jan 2026
Related posts
Research
/Security News
PolinRider Spreads Through Compromised GitHub Accounts and Packagist
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.
By Karlo Zanki - Sep 17, 2026
Security News
GitHub Actions Adds cache-mode to Limit Cache Poisoning Risk
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.
By Sarah Gooding - Sep 16, 2026