Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
@carbon/react
Advanced tools
React components for the Carbon Design System
To install @carbon/react
in your project, you will need to run the following
command using npm:
npm install -S @carbon/react
If you prefer Yarn, use the following command instead:
yarn add @carbon/react
This package requires Dart Sass in order to compile styles.
If you're new to Sass, we recommend checking out the following resources and links:
For info on how to configure Sass for your project, here are some common framework's documentation worth reviewing:
Or if you're just using a bundler:
Or anything else not listed above:
Once you get Sass up and running in your project, you may need to configure Sass
to include node_modules
in its includePaths
option. For more information,
checkout the configuration section in
our Sass docs.
There is an ongoing project to add *.d.ts
files to @carbon/react
. Though not
all components have yet been typed, you can still use the project successfully
in a TypeScript setting, provided you amend to your tsconfig.json
or
equivalent configuration file. Include the skipLibCheck: true
compiler option:
{
"compilerOptions": {
"skipLibCheck": true
}
}
To track the progress of TypeScript adoption, check out:
The @carbon/react
package provides components and icons for the Carbon Design
System.
To use a component, you can import it directly from the package:
import { Button } from '@carbon/react';
function MyComponent() {
return <Button>Example usage</Button>;
}
To include the styles for a specific component, you can either import all the styles from the project or include the styles for a specific component:
// Bring in all the styles for Carbon
@use '@carbon/react';
// Or bring in the styles for just one component
@use '@carbon/react/scss/components/button';
For a full list of components available, checkout our Storybook.
The @carbon/react
package also provides icon components that you can include
in your project. You can import these icon components from the
@carbon/react/icons
entrypoint:
import { Add } from '@carbon/react/icons';
function MyComponent() {
return <Add />;
}
For a full list of icons available, checkout our website.
If you're looking for @carbon/react
API documentation, check out:
We're always looking for contributors to help us fix bugs, build new features, or help us improve the project documentation. If you're interested, definitely check out our Contributing Guide! 👀
Licensed under the Apache 2.0 License.
This package uses IBM Telemetry to collect de-identified and anonymized metrics data. By installing this package as a dependency you are agreeing to telemetry collection. To opt out, see Opting out of IBM Telemetry data collection. For more information on the data being collected, please see the IBM Telemetry documentation.
FAQs
React components for the Carbon Design System
The npm package @carbon/react receives a total of 13,708 weekly downloads. As such, @carbon/react popularity was classified as popular.
We found that @carbon/react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.