Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
SVGR - SVG Resizer Powered by SVGO
Svgr is an efficient npm package for resizing and optimizing SVG files using the powerful SVGO (SVG Optimizer). It offers a straightforward solution to adjust SVG dimensions while maintaining high quality and optimizing file size.
To install svgr, use npm:
npm install svgr
svgr The primary entry point for the package. It is located in lib/svgr.js and can be used as import.
import svgr from 'svgr'
const result = svgr('svg-string', options)
// Options include SVGO's configuration settings with an additional 'customSize' parameter for the scale factor (defaults to 16).
You can customize the resizing behavior by passing options directly through the command line or programmatically in your code.
svgo - A powerful SVG optimizer used for optimizing SVG files.
MasterZeeno zeenoliev@gmail.com
MIT License. See the LICENSE file for details.
Contributions are welcome! Please open an issue or submit a pull request to contribute to the project.
For updates and changes, please refer to the CHANGELOG.
FAQs
Zee™ SVG Resizer Powered by SVGO.
The npm package zsvgr receives a total of 3 weekly downloads. As such, zsvgr popularity was classified as not popular.
We found that zsvgr demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.