Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
material-design-icons
Advanced tools
Material design icons are the official icon set from Google that are designed under the material design guidelines.
License change to Apache 2.0!
Read the developer guide on how to use the material design icons in your project.
The iconfont
folder contains pre-generated font files that can be included in a project. This is especially convenient for the web; however, it is generally better to link to the web font hosted on Google Fonts:
<link href="https://fonts.googleapis.com/icon?family=Material+Icons"
rel="stylesheet">
Read more in the font portion of our full developer guide.
The css-sprite
and svg-sprite
folders contain pre-generated sprite sheets, as well as svg symbols that can be <use>
d more directly and with fewer constraints. Instructions for using them are in the sprites documentation.
If you wish to use the icon set with Polymer, we recommend consuming them via the <iron-icons>
element (<core-icons>
in v0.5).
We have made these icons available for you to incorporate them into your products under the Apache License Version 2.0. Feel free to remix and re-share these icons and documentation in your products. We'd love attribution in your app's about screen, but it's not required. The only thing we ask is that you not re-sell these icons.
FAQs
Material Design icons by Google
The npm package material-design-icons receives a total of 52,729 weekly downloads. As such, material-design-icons popularity was classified as popular.
We found that material-design-icons demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.