
Product
Introducing Pull Request Stories to Help Security Teams Track Supply Chain Risks
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.
suade-icons
Advanced tools
A package that has a selection of different icons that Suade uses in its products
You can access two resources from this package, a CSS file that contains all the css styles, including the icon font declaration, and a JS array containing all the possible options you can use
If using a build tool like webpack, you can insert the css reference into your JS like this:
import 'suade-icons';
You can access a JS array of icons by using the following code:
import suadeIcons from 'suade-icons/dist';
Currently, the js file is not complied, so if you are running something like Jest on your product, you will need to get Jest to compile this package within your node modules. Adding something like this to your Jest config will do the trick:
{
"jest": {
"transformIgnorePatterns": [
"node_modules/(?!suade-icons)"
]
}
}
If you want to add to Suade Icons, you can use Icomoon's online app to edit. To start editing, upload
the selection.json
file in the src
folder. While Icomoon keeps your last edit icon set, it is recommended to
re-upload each session of icon editing, as other people can change and add to this repo.
Some tips and rules when it comes to editing icons
arrow1
and arrow2
, and the developer or
designer does not know which one to use.Once you have finished updating, download the zip folder that Icomoon provides. You can them empty this into the src folder, overriding everything that is there. Then, commit the changes and push the repo.
A CI pipeline will check everything is as it should. Some these rules are set as tests in the deployment pipeline, so a pipeline may fail if these rules are not followed.
Once the main/master pipeline is complete, it will publish the new icons.
FAQs
Icons font package
We found that suade-icons demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.
Research
/Security News
npm author Qix’s account was compromised, with malicious versions of popular packages like chalk-template, color-convert, and strip-ansi published.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.