
Research
/Security News
Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.
@iamstarkov/theming-w-listener
Advanced tools
Unified CSSinJS theming solution for React
ThemeProvider allows you to pass, update, merge and augment theme through context down react tree.withTheme allows you to receive theme and its updates in your components as a theme prop.createTheming allows you to integrate theming into your CSSinJS library with custom channel (if you need custom one).themeListener allows you to add theming support in your components.See Motivation for details.
npm install --save theming
# or
yarn add theming
In your components
Note: this component i will use later to show what theme you will get
import React from 'react';
import { withTheme } from 'theming';
const DemoBox = props => {
console.log(props.theme);
return (<div />);
}
export default withTheme(DemoBox);
In your app
import React from 'react';
import { ThemeProvider } from 'theming';
import DemoBox from './components/DemoBox'
const theme = {
color: 'black',
background: 'white',
};
const App = () => (
<ThemeProvider theme={theme}>
<DemoBox /> {/* { color: 'black', background: 'white' } */}
</ThemeProvider>
)
export default App;
Be our guest, play with theming in this webpackbin:
https://www.webpackbin.com/bins/-Km8TglfWP84oYhDquT1

These components are enabling seamless theming for your react applications. And as far as you dont want to pass theme object to each and every component. Thats why you want to use context. But as far context feature is experimental API and it is likely to break in future releases of React you don't want to use it directly. Here theming comes to play.
If you insist on using context despite these warnings, try to isolate your use of context to a small area and avoid using the context API directly when possible so that it's easier to upgrade when the API changes.
If you insist on using context despite these warnings, try to isolate your use of context to a small area and avoid using the context API directly when possible so that it's easier to upgrade when the API changes.
— Context, React documentation
Regarding isolation your use of context to a small area and small areas_ in particular our very own react prophet Dan Abramov have a thing to say:
Should I use React unstable “context” feature?
— Dan Abramov @dan_abramov on Twitter
So you are fine to use context for theming. theming package provides everything you need to do that:
ThemeProvider allows you to pass and update theme through context down react tree.withTheme allows you to receive theme and its updates in your components as a theme prop.createTheming allows you to integrate theming into your CSSinJS library with custom channel (if you need custom one).Theming package by default uses this string as a name of the field in context (hence contextTypes and childContextTypes). If you want to build your own components on top of theming, it might be a good idea to not rely on hard coded value, but instead import this value from the package.
import { channel } from 'theming';
console.log(channel); '__THEMING__';
React High-Order component, which passes theme object down the react tree by context.
import { ThemeProvider } from 'theming';
const theme = { /*…*/ };
<ThemeProvider theme={theme}>
<App />
</ThemeProvider>
Required
Type: Object, Function
If its Object and its root ThemeProvider then its intact and being passed down the react tree.
const theme = { themed: true };
<ThemeProvider theme={theme}>
<DemoBox /> {/* { themed: true } */}
</ThemeProvider>
If its Object and its nested ThemeProvider then its being merged with theme from parent ThemeProvider and passed down to the react tree.
const theme = { themed: true };
const patch = { merged: true };
<ThemeProvider theme={theme}>
<ThemeProvider theme={patch}>
<DemoBox /> {/* { themed: true, merged: true } */}
</ThemeProvider>
</ThemeProvider>
If its Function and its nested ThemeProvider then its being applied to the theme from parent ThemeProvider. if result is an Object it will be passed down to the react tree, throws otherwise.
const theme = { themed: true };
const augment = outerTheme =>
Object.assign({}, outerTheme, { augmented: true });
<ThemeProvider theme={theme}>
<ThemeProvider theme={augment}>
<DemoBox /> {/* { themed: true, augmented: true } */}
</ThemeProvider>
</ThemeProvider>
Required
Type: PropTypes.element
ThemeProvider uses React.Children.only in render, which returns the only child in children. Throws otherwise.
React High-Order component, which maps context to theme prop.
Required
Type: PropTypes.element
You need to have ThemeProvider with a theme somewhere upper the react tree, after that wrap your component in withTheme and your component will get theme as a prop. withTheme will handle initial theme object as well as theme updates.
PS. It doesnt break if you have PureComponent somewhere in between your ThemeProvider and withTheme (i have tests for that).
Usage with Component:
import React from 'react';
import { withTheme } from 'theming';
const DemoBox = props => {
console.log(props.theme);
return (<div />);
}
export default withTheme(DemoBox);
In the app:
import React from 'react';
import { ThemeProvider } from 'theming';
import DemoBox from './components/DemoBox'
const theme = {
color: 'black',
background: 'white',
};
const App = () => (
<ThemeProvider theme={theme}>
<DemoBox /> {/* { color: 'black', background: 'white' } */}
</ThemeProvider>
)
export default App;
Advanced helper to hook theming in any Component.
import { themeListener } from 'theming';
function CustomWithTheme(Component) {
return class CustomWithTheme extends React.Component {
static contextTypes = themeListener.contextTypes;
constructor(props) {
super(props);
this.state = { theme: {} };
this.setTheme = theme => this.setState({ theme });
}
componentWillMount() {
this.setTheme(themeListener.initial(this.context))
}
componentDidMount() {
this.unsubscribe = themeListener.subscribe(this.context, this.setTheme);
}
componentWillUnmount() {
this.unsubscribe();
}
render() {
const { theme } = this.state;
return <Component theme={theme} {...this.props} />;
}
}
}
themeListener is an Object with following fields:
themeListener.contextTypes
Objectstatic contextTypes = themeListener.contextTypes;
// or
static contextTypes = Object.assign({}, themeListener.contextTypes, {
/* your Component's contextTypes */
});
themeListener.initial
FunctionObject, where context is this.context from your componentcomponentWillMountconstructor(props) {
super(props);
}
componentWillMount() {
this.setState({ theme: themeListener.initial(this.context) });
}
themeListener.subscribe
FunctionObject, where context is this.context from your componentFunction, which in turn will be invoked with theme update Object, every time theme is updated in ThemeProvidercomponentDidMountFunction, which you should invoke in componentWillUnmountconstructor(props) {
super(props);
}
componentDidMount() {
this.unsubscribe = themeListener.subscribe(theme => this.setState({ theme }));
}
componentWillUnmount() {
this.unsubscribe();
}
Function to create ThemeProvider and withTheme with custom context channel.
Type: String
Default: __THEMING__
Result: Object { channel, withTheme, ThemeProvider. themeListener }
withTheme, ThemeProvider and themeListener are the same as default ones, but with overwritten context channel.
channel is customChannel to track what is context channel.
import { createTheming } from 'theming';
const theming = createTheming('__styled-components__');
const { channel, withTheme, ThemeProvider } = theming;
export default {
channel,
withTheme,
ThemeProvider,
};
MIT © Vladimir Starkov
FAQs
Unified CSSinJS theming solution for React
We found that @iamstarkov/theming-w-listener demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Bitwarden CLI 2026.4.0 was compromised in the Checkmarx supply chain campaign after attackers abused a GitHub Action in Bitwarden’s CI/CD pipeline.

Research
/Security News
Docker and Socket have uncovered malicious Checkmarx KICS images and suspicious code extension releases in a broader supply chain compromise.

Product
Stay on top of alert changes with filtered subscriptions, batched summaries, and notification routing built for triage.