
Research
/Security News
Laravel Lang Compromised with RCE Backdoor Across 700+ Versions
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.
@docyrus/ui-pro-developer-tools
Advanced tools
Installer-driven Docyrus UI Pro developer tools and component source templates.
Installer-driven source distribution for Docyrus UI Pro components. Instead of importing compiled library code, this package copies component source directly into your app — similar to how shadcn/ui and Animate UI work.
npm install @docyrus/ui-pro-developer-tools
# or
pnpm add @docyrus/ui-pro-developer-tools
Your target app must have:
components.json with aliases.ui set to @/components/ui@/* path alias configured in tsconfig.json or tsconfig.app.jsonsrc/ directoryEach installable component also declares its own required shadcn components and npm packages. The CLI validates all prerequisites before copying any files.
The package provides a ui-pro-developer-tools CLI binary.
npx ui-pro-developer-tools add <component-name> [options]
| Option | Description |
|---|---|
--cwd <path> | Target app directory (defaults to current directory) |
--dry-run | Preview files that would be written without making changes |
--overwrite | Allow overwriting existing files |
# Preview what would be installed
npx ui-pro-developer-tools add data-source-query-builder --dry-run
# Install into the current directory
npx ui-pro-developer-tools add data-source-query-builder
# Install into a specific app, replacing existing files
npx ui-pro-developer-tools add data-source-query-builder --cwd apps/my-app --overwrite
| Component | Description |
|---|---|
data-source-query-builder | Visual query builder for Docyrus data sources with filters, columns, ordering, calculations, formulas, pivots, and child queries |
data-view | Data view shell with shared core and alias-based template |
import { installComponent, installables } from '@docyrus/ui-pro-developer-tools';
// List available components
console.log(Object.keys(installables));
// Install a component
const result = installComponent('data-source-query-builder', {
cwd: '/path/to/app',
dryRun: false,
overwrite: false
});
installables — registry of all installable component definitionsinstallComponent(name, options) — install a component into a target appDataSourceQueryBuilder, DataView, and shared field/i18n typestemplates/ are copied into the app's src/ directory under components/docyrus/react ^19react-dom ^19MIT
FAQs
Installer-driven Docyrus UI Pro developer tools and component source templates.
The npm package @docyrus/ui-pro-developer-tools receives a total of 4 weekly downloads. As such, @docyrus/ui-pro-developer-tools popularity was classified as not popular.
We found that @docyrus/ui-pro-developer-tools demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 4 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Laravel Lang packages were compromised with an RCE backdoor across hundreds of versions, exposing cloud, CI/CD, and developer secrets.

Security News
Socket found a malicious postinstall hook across 700+ GitHub repos, including PHP packages on Packagist and Node.js project repositories.

Security News
Vibe coding at scale is reshaping how packages are created, contributed, and selected across the software supply chain