@web-portfolio/icons-sanity 1.0.0 → 1.0.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/README.md CHANGED
@@ -17,6 +17,34 @@ to see exactly what your editors will be choosing from.
17
17
 
18
18
  [![Browse icons at icons.getresume.dev](https://raw.githubusercontent.com/jatinrao/icons/main/.github/assets/gallery-grid.png)](https://icons.getresume.dev)
19
19
 
20
+ ## Recent changes
21
+
22
+ **97% smaller package**
23
+ - This plugin no longer bundles its own copy of the 633-icon SVG registry.
24
+ It now renders icon previews through `@web-portfolio/icons`'s `<Icon>`
25
+ component (added as a peer dependency, see below) and only carries the
26
+ lightweight search index — name, label, tags, category, no SVG markup —
27
+ that the picker's search and filtering actually need.
28
+ - Published size: **1.1 MB → 35.7 KB** (tarball), **1.36 MB → 60.5 KB**
29
+ (unpacked JS), **577 KB → 15 KB** (gzipped). Since any project using this
30
+ plugin already installs `@web-portfolio/icons` to render the picked icon
31
+ on its frontend, that icon data is no longer downloaded twice.
32
+
33
+ **Security & supply chain**
34
+ - Bumped `vitest` to 3.2.7 and `drizzle-orm` to 0.45.2 across the monorepo,
35
+ and pinned several transitive dependencies (`esbuild`, `sharp`, `postcss`,
36
+ `glob`, `js-yaml`, `uuid`, `prismjs`, `adm-zip`, `es-define-property`) to
37
+ patched versions via pnpm overrides.
38
+ - Install scripts now run only for an explicit allow-list (`esbuild`,
39
+ `sharp`) instead of the whole dependency tree by default.
40
+ - Current
41
+ [Socket.dev](https://socket.dev/npm/package/@web-portfolio/icons-sanity)
42
+ score: **100** Vulnerability, **100** Quality, **100** License, **88**
43
+ Maintenance, **80** Supply Chain Security. This plugin still ships zero
44
+ runtime dependencies of its own — the Supply Chain number reflects
45
+ Socket's scan of the full Sanity Studio peer tree (`sanity`, `@sanity/ui`,
46
+ ...), not this plugin's code.
47
+
20
48
  ## Why this plugin
21
49
 
22
50
  If you've built a portfolio, agency site, or any Sanity project with a
@@ -30,9 +58,9 @@ you from doing that again:
30
58
  - **Results ranked, not just filtered.** Typing `go` leads with `go`, not
31
59
  `godot` — exact matches first, then name prefixes, then everything that
32
60
  merely mentions the term.
33
- - **Nothing fetched while editing.** The whole registry is bundled into the
34
- plugin at build time, so the picker opens instantly and works even if
35
- Studio is running offline.
61
+ - **Nothing fetched while editing.** Icon markup (via `@web-portfolio/icons`)
62
+ and search metadata (via this plugin) are both bundled at build time, so
63
+ the picker opens instantly and works even if Studio is running offline.
36
64
  - **Stores a name, not a blob.** The field value is a plain string
37
65
  (`"react"`, `"github"`) rather than raw markup or an asset reference,
38
66
  which pairs directly with `@web-portfolio/icons`'s `<Icon name="..." />`
@@ -56,9 +84,11 @@ npm install @web-portfolio/icons-sanity
56
84
  pnpm add @web-portfolio/icons-sanity
57
85
  ```
58
86
 
59
- Peer dependencies (already present in any standard Sanity Studio v3 project):
87
+ Peer dependencies:
60
88
  `sanity >=3`, `@sanity/ui >=2`, `@sanity/icons >=3`, `react >=18`,
61
- `styled-components >=6`.
89
+ `styled-components >=6` (already present in any standard Sanity Studio v3
90
+ project), plus `@web-portfolio/icons >=1.0.1`, which renders the icons this
91
+ plugin picks — install it if your Studio doesn't already have it.
62
92
 
63
93
  ## Setup
64
94