
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@tomalin/designertoolbox
Advanced tools
MCP Server for Component Library - provides tools to list, search, and recommend UI components
A modern component library and design system platform built with Next.js, React, and TypeScript.
Designer Tool is a comprehensive design system and component library that allows you to create, customize, and export beautiful UI components for your projects. It includes a visual component playground, customizable hero sections, cards, buttons, and much more.
git clone https://github.com/Tomalin18/designertool.git
cd designertool
npm install
cp .env.example .env.local
npm run dev
designertool/
├── app/ # Next.js app directory
├── components/ # React components
│ ├── customize/ # Customizable UI sections
│ ├── ui/ # Reusable UI primitives
│ └── playground/ # Component playground
├── docs/ # Documentation
├── lib/ # Utilities and helpers
├── contexts/ # React contexts
├── hooks/ # Custom hooks
└── public/ # Static assets
This project uses a three-branch strategy:
feature/* → dev (test) → release (verify) → stable (production)
stable:git checkout stable
git checkout -b feature/your-feature
git add .
git commit -m "feat: your changes"
git push origin feature/your-feature
feature/your-feature → devdev → releaserelease → stableFor detailed instructions, see docs/GIT_WORKFLOW.md and docs/BRANCH_WORKFLOW.md
Deployed to Vercel with automatic deployments:
release branch)dev branch)stable branch)npm run dev # Development server
npm run build # Build for production
npm run start # Start production server
npm run lint # Run linter
npm run type-check # TypeScript check
Create .env.local:
NEXT_PUBLIC_SUPABASE_URL=your_supabase_url
NEXT_PUBLIC_SUPABASE_ANON_KEY=your_supabase_key
NEXT_PUBLIC_STRIPE_PUBLISHABLE_KEY=your_stripe_key
STRIPE_SECRET_KEY=your_stripe_secret
Follow Conventional Commits:
feat(scope): description
fix(scope): description
docs: description
[Your License]
Last Updated: December 5, 2025
FAQs
MCP Server for Component Library - provides tools to list, search, and recommend UI components
We found that @tomalin/designertoolbox demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.