
Security News
Free Certified Patch for Critical Rails Active Storage Vulnerability
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.
@bento/container
Advanced tools
Container component primitive - atomic building block for polymorphic rendering and slot composition
import { Meta, Story, ArgTypes, Controls, Source } from '@storybook/addon-docs/blocks'; import * as Stories from './container.stories.tsx'; import BasicExample from './examples/basic.tsx?raw'; import AsExample from './examples/as.tsx?raw'; import BuildingBlockExample from './examples/building-block.tsx?raw'; import NestedExample from './examples/nested.tsx?raw';
Container is the atomic building block for polymorphic rendering + slot composition + prop spreading. It provides the infrastructure that makes Bento components infinitely customizable while maintaining consistency.
npm install --save @bento/container
The @bento/container package exports the Container component:
<Source language='tsx' code={ BasicExample } />
The following properties are available to be used on the Container component:
Setting the as prop allows you to change the HTML tag of the Container component. By default, Container renders as a div element.
<Source language='tsx' code={ AsExample } />
Container is designed to be the foundation for building other components. This example shows a custom Box component built on top of Container with padding and elevation props.
<Source language='tsx' code={ BuildingBlockExample } />
Container components can be nested to create semantic HTML structures with proper document outline.
<Source language='tsx' code={ NestedExample } />
FAQs
Container component primitive - atomic building block for polymorphic rendering and slot composition
The npm package @bento/container receives a total of 2 weekly downloads. As such, @bento/container popularity was classified as not popular.
We found that @bento/container demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.

Security News
Socket has released a free Certified Patch for a critical Rails Active Storage vulnerability, giving developers time to upgrade to a secure Rails version.

Security News
/Threat Research
A malicious Ruby gem runs a credential-stealing worm during installation, poisons AI coding tools, and can wipe files when a stolen GitHub token is revoked.

Security News
GitHub is tightening GitHub Actions security with new restrictions on privileged pull request workflows. Here's what changes and how maintainers are affected.