
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@react-ui/core
Advanced tools
Standard model of UI development
When building React apps a multitude of components is created. They end up scattered across the project, making it hard to control and use them. React UI tries to solve the problem by encapsulating all of the components into a single dependency that is used across the app:
import UI from 'src/components/ui';
const Header = () => (
<section>
<UI.Label>Press the button to greet everyone</UI.Label>
<UI.Button kind="primary">Hello, GitHub!</UI.Button>
</section>
);
npm install --save @react-ui/core
Unlike other UI related libraries, React UI doesn't include any built-in components. It rather suggests a pattern for managing components in an app. So, let's create a React UI-compatible component:
// src/components/ui/basic/button.jsx
import 'src/styles/button.css';
export default () => (props) => (
<input type="button" className={`button-${props.kind}`}>
{props.children}
</input>
);
As you can see, the stateless component is wrapped by a function. It is used for passing styles in more complex use cases (explained later in the docs).
React UI exports only a single function that is used for preparing UI for the app:
// src/components/ui/index.js
import initUI from '@react-ui/core';
import Button from './button';
import Label from './label';
const components = {
Button,
Label,
};
const UI = initUI(components)();
export default UI;
React UI pattern revolves around the following three aspects:
single point of initialization
styles are passed to components as a parameter, thus, easing UI theming
UI components can be grouped in layers, where a given layer has access to the components of parent layers. This exact property helps to achieve the proper UI composition.
If you have a suggestion, please, create an issue.
Apache License, Version 2.0
FAQs
Standard model of UI development
We found that @react-ui/core demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.