
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
Unicode characters are tasty food for programs! feed your apps some emojis. Asciinema here to see in action. Inspired to make working with unicode and emojis easier by this article.
$ npm install --save food
$ npm install --global food
$ food --help
unicode characters are tasty food for programs! feed your apps some emojis
Usage
$ food [input]
Options
--options Keywords [Default: description]
Examples
$ food search uncirons
[{
"unicode": "1F984",
"display": "🦄",
"description": "unicorn face",
"category": "animal-mammal"
}...
const food = require('food');
food.search('unicorns');
/*=>
[{
"unicode": "1F984",
"display": "🦄",
"description": "unicorn face",
"category": "animal-mammal"
} ...
*/
Type: array<object>
Array of emojis with the following properties
Unicode representation.
The visual representation.
Description of the emoji.
The grouping of the emoji.
Type: string
search term passed in for fuzzy searching.
Note** this project uses fuse for searching so see krisk/fuse for full options.
Type: array<string>
Default: false
A list of nested json parameters for the parser to look for.
MIT © Stanley Zheng
FAQs
unicode characters are tasty food for programs! feed your apps some emojis
The npm package food receives a total of 4 weekly downloads. As such, food popularity was classified as not popular.
We found that food demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.