Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
react-oui-icons
Advanced tools
<!-- [![Build Status](https://travis-ci.org/optimizely/oui-icons.svg?branch=master)](https://travis-ci.org/optimizely/oui-icons) -->
Icons for the Optimizely application and other OUI projects.
This implementation consists of a Icon React Component that will generate an inline SVG icon using the data associated with the name of the icon. Any attributes will be passed as props.
Download the package: Run yarn add oui-icons
to include the latest icons in your project.
Using an icon: You can use one of the icons in the HTML with:
import Icon from './Icon';
...
<Icon
name="search"
description="search"
width="24"
height="24"
/>
...
src/svg
.src/Icon/icons.js
.Added
, Changed
, Fixed
, or Removed
.[Patch]
, [Feature]
, or Release
.
[Patch]
: Backwards compatible fixes (patches) to existing icons, infrastructure, or documentation.[Feature]
: New icons or features that are backwards compatible.[Release]
: Changes that are not backwards compatible such as the removal of an icon.react-oui-icons
NPM package. Contact a UI Engineer for help.2.11.0
. This is when NPM added support for the postversion
hook that we rely on. You can check your version by running npm -v
in the command line.git checkout master && git pull
.CHANGELOG.md
, update to reflect the new version, and commit the change. Here are some tips:[Release]
– 1.2.3
would become 2.0.0
.[Feature]
– 1.2.3
would become 1.3.0
.[Patch]
– 1.2.3
would become 1.2.4
.CHANGELOG.md
update. The message could be: “Prep for 3.1.3 release.”package.json
in this step.npm version patch
- version includes a backwards-compatible bug fix or tweak. This includes small icon style modifications.npm version minor
- version includes a backwards compatible new "feature" such as a new icon.npm version major
- version contains a non-backwards compatible breaking change such as a renamed or deleted icon.FAQs
Icons for the Optimizely application and other OUI projects.
The npm package react-oui-icons receives a total of 556 weekly downloads. As such, react-oui-icons popularity was classified as not popular.
We found that react-oui-icons demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.