
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
material-icons-subset
Advanced tools
#### Creates a new font with a subset of icons from [Material Design Icons Webfont](https://materialdesignicons.com/)
This library uses webfont to create the subset and @mdi/svg as the source.
npm i material-icons-subset
You can pass a list of icon names to be included in the font as arguments in the command line:
material-icons-subset camera menu account-outline email archive
Or, you can pass the path for a config.json file:
material-icons-subset font-config.json
The config.json file must have an array called icons with the name of the icons to be include in the font:
{
"icons": [
"camera",
"menu",
"account-outline",
"tune",
"bookmark-outline",
"pause",
"arrow-left",
"archive",
"email"]
}
You can also use the config.json to configure:
{
"formats": ["ttf"], //svg, ttf, woff, woff2
"fontName": "Material Design Icons",
"fontFile": "materialdesignicons",
"dest": ".",
"icons": [...]
These are the default values.
The following config.json are accepted.
{"icons": [...], ...}}
{"material-icons-subset": {"icons": [...], ...}}
{"extra": {"icons": [...], ...}}
{"extra": {"material-icons-subset": {"icons": [...], ...}}}
In this way, package.json or app.json can be used to configuration.
By default, the library will create two files:
materialdesignicons-subset.ttf and
materialdesignicons-subset.json with the GlyphMap.
The GlyphMap file can be used with libraries like react-native-vector-icons with the alias configuration in the bundler for the font and for the GlyphMap. In this library this font is called MaterialComunityIcons.
FAQs
#### Creates a new font with a subset of icons from [Material Design Icons Webfont](https://materialdesignicons.com/)
We found that material-icons-subset demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.