Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@astrojs/react
Advanced tools
@astrojs/react is an integration package for Astro, a modern static site generator, that allows developers to use React components within their Astro projects. This package enables seamless interoperability between Astro and React, allowing developers to leverage React's component model and ecosystem within the Astro framework.
Using React Components in Astro
This feature allows developers to import and use React components directly within Astro files. The code sample demonstrates how to import a React component and use it in an Astro file, passing props as needed.
```jsx
// Example of using a React component in an Astro file
---
import ReactComponent from '../components/ReactComponent.jsx';
---
<ReactComponent message="Hello from React!" />
```
Hydration Control
Astro provides fine-grained control over when and how React components are hydrated on the client-side. The code sample shows how to use the `client:load` directive to specify that a React component should hydrate when the page loads.
```jsx
// Example of controlling hydration in Astro with React
---
import ReactComponent from '../components/ReactComponent.jsx';
---
<ReactComponent client:load message="This component hydrates on load!" />
```
@astrojs/vue is similar to @astrojs/react but for Vue.js components. It allows developers to use Vue components within Astro projects, providing similar integration and hydration controls as @astrojs/react.
@astrojs/svelte enables the use of Svelte components in Astro projects. Like @astrojs/react, it offers seamless integration and hydration options, but for the Svelte framework.
vite-plugin-react is a Vite plugin that provides React support for Vite projects. While it is not specific to Astro, it offers similar functionality in terms of enabling React component usage in a modern build tool environment.
This Astro integration enables server-side rendering and client-side hydration for your React components.
There are two ways to add integrations to your project. Let's try the most convenient option first!
astro add
commandAstro includes a CLI tool for adding first party integrations: astro add
. This command will:
astro.config.*
file to apply this integrationTo install @astrojs/react
, run the following from your project directory and follow the prompts:
# Using NPM
npx astro add react
# Using Yarn
yarn astro add react
# Using PNPM
pnpm astro add react
If you run into any issues, feel free to report them to us on GitHub and try the manual installation steps below.
First, install the @astrojs/react
integration like so:
npm install @astrojs/react
Most package managers will install associated peer dependencies as well. Still, if you see a "Cannot find package 'react'" (or similar) warning when you start up Astro, you'll need to install react
and react-dom
:
npm install react react-dom
Now, apply this integration to your astro.config.*
file using the integrations
property:
astro.config.mjs
import { defineConfig } from 'astro/config';
import react from '@astrojs/react';
export default defineConfig({
// ...
integrations: [react()],
});
To use your first React component in Astro, head to our UI framework documentation. You'll explore:
For help, check out the #support
channel on Discord. Our friendly Support Squad members are here to help!
You can also check our Astro Integration Documentation for more on integrations.
This package is maintained by Astro's Core team. You're welcome to submit an issue or PR!
FAQs
Use React components within Astro
The npm package @astrojs/react receives a total of 104,505 weekly downloads. As such, @astrojs/react popularity was classified as popular.
We found that @astrojs/react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.