Both icon styles are preconfigured to be stylable by setting the color CSS property, either manually or using utility classes like text-gray-500 in a framework like Tailwind CSS.
React
First, install @heroicons/react from npm:
1npm install @heroicons/react
Now each icon can be imported individually as a React component:
The 24x24 outline icons can be imported from @heroicons/react/24/outline, the 24x24 solid icons can be imported from @heroicons/react/24/solid, the 20x20 solid icons can be imported from @heroicons/react/20/solid, and 16x16 solid icons can be imported from @heroicons/react/16/solid.
Icons use an upper camel case naming convention and are always suffixed with the word Icon.
The 24x24 outline icons can be imported from @heroicons/vue/24/outline, the 24x24 solid icons can be imported from @heroicons/vue/24/solid, the 20x20 solid icons can be imported from @heroicons/vue/20/solid, and the 16x16 solid icons can be imported from @heroicons/vue/16/solid.
Icons use an upper camel case naming convention and are always suffixed with the word Icon.
While we absolutely appreciate anyone's willingness to try and improve the project, we're currently only interested in contributions that fix bugs, for example things like incorrect TypeScript types, or fixing an icon that's been exported with a fill instead of a stroke, etc.
We're not accepting contributions for new icons or adding support for other frameworks like Svelte or SolidJS. Instead we encourage you to release your own icons in your own library, and create your own packages for any other frameworks you'd like to see supported.
License
This library is MIT licensed.
No vulnerabilities found.
Reason
GitHub workflow tokens follow principle of least privilege
Details
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/prepare-release.yml:18
Info: topLevel 'contents' permission set to 'read': .github/workflows/CI.yml:10
Info: topLevel 'contents' permission set to 'read': .github/workflows/prepare-release.yml:13
Info: topLevel 'contents' permission set to 'read': .github/workflows/release-insiders.yml:8
Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yml:8
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
Info: project has a license file: LICENSE:0
Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
no binaries found in the repo
Reason
packaging workflow detected
Details
Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release-insiders.yml:15
Reason
1 existing vulnerabilities detected
Details
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Reason
4 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 4
Reason
Found 5/30 approved changesets -- score normalized to 1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
Warn: no security policy file detected
Warn: no security file to analyze
Warn: no security file to analyze
Warn: no security file to analyze
Reason
project is not fuzzed
Details
Warn: no fuzzer integrations found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/CI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/CI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/CI.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prepare-release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/prepare-release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prepare-release.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/prepare-release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/prepare-release.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/prepare-release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-insiders.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/release-insiders.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-insiders.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/release-insiders.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-insiders.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/release-insiders.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/tailwindlabs/heroicons/release.yml/master?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/CI.yml:40
Warn: npmCommand not pinned by hash: .github/workflows/release-insiders.yml:43
Warn: npmCommand not pinned by hash: .github/workflows/release.yml:43
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 0 out of 3 npmCommand dependencies pinned
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
Warn: 0 commits out of 10 are checked with a SAST tool
Score
5.5
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.