
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@nativecn/cli
Advanced tools
CLI tool for initializing and managing NativeCN components in React Native projects
A CLI tool for initializing and managing NativeCN components in React Native projects.
npm install @nativecn/cli
# or
npx @nativecn/cli [command]
npx @nativecn/cli init
The init command will:
npx @nativecn/cli add button input card
Options:
--dir <directory> - Target directory for components (default: './components/ui')--overwrite - Overwrite existing componentsnpx nativecn preset
Creates a nativecn-preset.js file with default theme colors.
button - A customizable button component with different variants, sizes and statesaccordion - A vertically stacked set of interactive headings that reveal or hide associated contentalert - A component that displays a brief, important message to get users' attentionalertdialog - A modal dialog that interrupts the user with important content and expects a responseavatar - An image component used to represent a user, with a fallback for showing initialsbadge - A small visual indicator for highlighting status, labels or countsbreadcrumb - A navigation component that shows the current location in a hierarchical structureaspectratio - A component to maintain consistent width/height ratios across different screen sizescard - A container component that groups related content and actionscarousel - A slideshow component for cycling through elements like images or slides of contentinput-otp - A one-time password input component with individual character boxes and auto-focusskeleton - A placeholder loading component that animates to indicate content is being loadedMIT
FAQs
CLI tool for initializing and managing NativeCN components in React Native projects
We found that @nativecn/cli demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.