
Security News
Federal Government Rescinds Software Supply Chain Mandates, Makes SBOMs Optional
The U.S. government is rolling back software supply chain mandates, shifting from mandatory SBOMs and attestations to a risk-based approach.
@coder/mux-chat-components
Advanced tools
Shared chat UI from Mux, published for reuse in mux.md.
Principle: this package re-exports Mux’s existing chat renderer implementation (messages, tools, markdown, diff rendering) to avoid a parallel rendering stack.
import {
ChatHostContextProvider,
ThemeProvider,
MessageRenderer,
createReadOnlyChatHostContext,
type DisplayedMessage,
} from "@coder/mux-chat-components";
function ConversationViewer(props: { messages: DisplayedMessage[] }) {
return (
<ThemeProvider>
<ChatHostContextProvider value={createReadOnlyChatHostContext()}>
{props.messages.map((m) => (
<MessageRenderer key={m.historyId} message={m} />
))}
</ChatHostContextProvider>
</ThemeProvider>
);
}
createReadOnlyChatHostContext() sets most ChatHostContext.uiSupport flags to "unsupported" and enables:
jsonRawViewimageAttachmentsYou can override individual flags:
createReadOnlyChatHostContext({ jsonRawView: "supported" });
Mux uses Tailwind + CSS variables for theming.
This package ships a minimal CSS variable set for 4 themes (dark/light/solarized-dark/solarized-light):
import "@coder/mux-chat-components/styles";
The host app is still responsible for providing Tailwind (or equivalent styles) for layout/typography; the CSS export is primarily for tokens (colors, borders, etc.).
cd packages/chat-components
bun install
bun run typecheck
bun run build
AGPL-3.0-only
FAQs
Shared chat components for Mux conversation rendering
The npm package @coder/mux-chat-components receives a total of 19,979 weekly downloads. As such, @coder/mux-chat-components popularity was classified as popular.
We found that @coder/mux-chat-components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The U.S. government is rolling back software supply chain mandates, shifting from mandatory SBOMs and attestations to a risk-based approach.

Security News
crates.io adds a Security tab backed by RustSec advisories and narrows trusted publishing paths to reduce common CI publishing risks.

Research
/Security News
A Chrome extension claiming to hide Amazon ads was found secretly hijacking affiliate links, replacing creators’ tags with its own without user consent.