
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@expressjs-kusto/react
Advanced tools
React rendering extension for the Express.js-Kusto framework — adds router.GET_REACT(...) via the CoC extension system (CSR v1).
React rendering extension for the Express.js-Kusto framework. Adds a
router.GET_REACT('Page') method that renders React pages, wired through the framework's
Convention-over-Configuration extension system — no changes to framework core.
CSR by default, SSR optional. By default
GET_REACTserves an HTML shell that boots the named React page in the browser (CSR), managing areact-routerBrowserRouter. Enable server-side rendering with hydration per route or globally with thessroption — see Server-side rendering.
This is a Kusto extension: it ships a plain KustoExtension object and is activated by a
one-line file under your project's src/app/extensions/ folder. When loaded, the framework
registers GET_REACT on ExpressRouter, serves the built client assets, and (in dev) rebuilds
the bundle on boot. The new method appears in your IDE via a TypeScript declaration-merge.
src/app/extensions/ convention and @lib path alias).react, react-dom, react-router-dom, express.npm install @expressjs-kusto/react
react, react-dom, and react-router-dom are peer dependencies and are
installed automatically by npm 7+ (and modern pnpm/yarn). If your package
manager does not auto-install peers, add them explicitly:
npm install @expressjs-kusto/react react react-dom react-router-dom
Create src/app/extensions/react.ts:
import { react } from '@expressjs-kusto/react';
import type { ReactRouteOptions } from '@expressjs-kusto/react';
declare module '@lib/http/routing/expressRouter' {
interface ExpressRouter {
GET_REACT(component: string, options?: ReactRouteOptions): this;
}
}
export default react({});
The declare module block augments ExpressRouter so router.GET_REACT(...) is
recognised across your project (IntelliSense + type-checking). Declaring it in the
activation file is the reliable approach — it merges into your host's @lib
ExpressRouter regardless of how types/typeRoots are configured in tsconfig.
Alternatively, if your
tsconfigpicks up ambient package types, you can replace thedeclare moduleblock with a single triple-slash reference:/// <reference types="@expressjs-kusto/react/augment" />
Put page components under src/app/views/ (configurable). Each file default-exports a component:
// src/app/views/Home.tsx
export default function Home(props: { name?: string }) {
return <h1>Hello {props.name ?? 'world'}</h1>;
}
Nested files become dotted keys: src/app/views/admin/Dashboard.tsx → admin/Dashboard.
In any route.ts, the Express route maps to a React page — the framework owns the routing:
import { ExpressRouter } from '@lib/http/routing/expressRouter';
const router = new ExpressRouter();
router.GET_REACT('Home', { props: { name: 'kusto' }, title: 'Home' });
export default router.build();
GET_REACT is chainable like the other verbs and auto-registers an OpenAPI entry.
Tailwind CSS v4 is bundled and enabled by default — just use utility classes in your page components:
// src/app/views/Home.tsx
export default function Home() {
return <h1 className="text-3xl font-bold text-indigo-600">Hello</h1>;
}
The extension compiles a stylesheet (scanning your components) and injects a
<link> into every page shell automatically. No tailwind.config.js is needed.
To customize (add @theme, custom CSS, extra @source paths), create
src/app/views/app.css — it becomes the Tailwind input:
@import "tailwindcss";
@theme {
--color-brand: #5b21b6;
}
Disable Tailwind with react({ tailwind: false }), or point at a different input
with react({ cssEntry: 'styles/app.css' }).
CSR is the default. To server-render a page's HTML and hydrate it on the client, opt in per route or globally:
// Per route (CSR stays the default for every other route):
router.GET_REACT('Home', { ssr: true, props: { name: 'kusto' } });
// Or flip the default for all pages, overriding per route as needed:
export default react({ ssr: true }); // global default
router.GET_REACT('Landing'); // SSR (inherits the default)
router.GET_REACT('Dashboard', { ssr: false }); // opt this one back to CSR
When ssr is on, the extension builds a Node-side server bundle and renders the page
with renderToString inside a react-router StaticRouter; the same props feed both the
server render and client hydration (hydrateRoot). The client bundle still loads so the
page is interactive after hydration.
Notes
ssr: true must not touch
browser-only globals (window, document, localStorage) during render. Move such
access into effects (useEffect), which run only on the client.react-dom/server and react-router-dom/server, which
are already part of the required peer dependencies.react(options?)| Option | Default | Description |
|---|---|---|
pagesDir | views | Pages directory, relative to src/app. |
mountPath | /__kusto_react | URL prefix the built client assets are served under. |
outDir | .kusto/react | Output dir (relative to project root) for built assets. |
title | Kusto React | Default <title>. |
production | NODE_ENV==='production' | Force production (minified) bundle / disable dev rebuild. |
tailwind | true | Compile Tailwind CSS (v4) and link it into every page shell. |
cssEntry | views/app.css | Tailwind input CSS, relative to src/app. Falls back to a default @import "tailwindcss"; if the file is absent. |
head | – | Extra <head> HTML (e.g. stylesheet links). |
ssr | false | Default rendering mode for all pages. true server-renders + hydrates; override per route with GET_REACT(..., { ssr }). Falls back to CSR if a page can't be server-rendered. |
router.GET_REACT(component, options?)| Option | Description |
|---|---|
title | Override the page <title>. |
props | Static object, or (req) => props (sync/async) for request-derived props. Serialized into the shell. |
summary | OpenAPI summary for the route. |
ssr | Override the rendering mode for this route. true server-renders + hydrates, false forces CSR. Defaults to the extension-level ssr option. |
Dev: the client bundle is built automatically on server boot (when not in production), so pages render with no extra step.
Production: build the bundle ahead of serving:
npx kusto extensions build --production
This runs the extension's onBuild hook (esbuild) and writes <outDir>/client.js, which the
framework then serves statically at mountPath. A failing build exits non-zero (fail-fast).
GET_REACT('Home') registers a GET route that responds with an HTML shell containing
#root, the page name + props (window.__KUSTO_PAGE__ / __KUSTO_PROPS__), a render-mode
flag (__KUSTO_SSR__), and a <script> tag for the client bundle. When ssr is on, #root
is filled with the server-rendered markup (renderToString inside a StaticRouter).onBuild (and dev-boot) discover every page under pagesDir and bundle them with esbuild:
a browser IIFE (client.js) for the client, plus a Node CJS server bundle (with React
externalized) used for SSR.__KUSTO_PAGE__, looks the component up in the bundled
registry, and either hydrates the server markup (hydrateRoot, when __KUSTO_SSR__) or
renders fresh (createRoot), inside a react-router BrowserRouter.renderToPipeableStream with Suspense) for better TTFB on large pages.react-router route map from all GET_REACT
registrations so cross-page navigation is client-side (today each page is its own server entry;
in-page react-router is fully available).npm run build # emits dist/ with .d.ts (also runs on prepublishOnly)
npm publish --access public
The package publishes only dist/ (+ README/LICENSE). Requires the @expressjs-kusto npm
scope to exist and your account to have publish rights.
MIT
FAQs
React rendering extension for the Express.js-Kusto framework — adds router.GET_REACT(...) via the CoC extension system (CSR v1).
The npm package @expressjs-kusto/react receives a total of 0 weekly downloads. As such, @expressjs-kusto/react popularity was classified as not popular.
We found that @expressjs-kusto/react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.