
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@doist/typist
Advanced tools
The mighty Tiptap-based rich-text editor React component that powers Doist products.
Typist is the mighty Tiptap-based rich-text editor React component that powers Doist products, which can also be used for displaying content in a read-only fashion. Typist also supports a plain-text mode, and comes with HTML/Markdown serializers.
Note
This project is not attempting to be an all-purpose rich-text editor. Whilst everyone is welcome to fork or use this package in their own products, development decisions are centered around Doist product requirements.
npm install --save @doist/typist
import { TypistEditor, RichTextKit } from '@doist/typist'
function TypistEditorContainer({ content }) {
return (
<TypistEditor
placeholder="A full rich-text editor, be creative…"
content={content}
extensions={[RichTextKit]}
/>
)
}
Note
content,extensions, andplaceholderare initialization-only: they're read when the editor first mounts, and later changes to these props are ignored. See the Component Lifecycle documentation for how to handle runtime changes.
If you're looking for additional documentation, in-depth examples, or a live demo, please check out our Storybook.
A curated list of open-source rich-text editors powered by Tiptap that we can draw inspiration from:
If you're interested in contributing code and/or documentation, please read our contributing guide.
The use of this source code is governed by an MIT-style license that can be found in the LICENSE file.
FAQs
The mighty Tiptap-based rich-text editor React component that powers Doist products.
The npm package @doist/typist receives a total of 217 weekly downloads. As such, @doist/typist popularity was classified as not popular.
We found that @doist/typist demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 12 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.