Security News
The Risks of Misguided Research in Supply Chain Security
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
@gera2ld/jsx-dom
Advanced tools
Use JSX for HTML/SVG elements.
v1.x does not have virtual DOM, as a result all elements are mounted immediately and we can hardly decide if an element is or is not part of an SVG.
v2.x introduces virtual DOM so that we can decide namespace of each node based on its parent.
However if you do not need SVG support and expect simple usage as before, just set pragma/jsxFactory to JSX.hm
instead of JSX.h
.
$ yarn add @gera2ld/jsx-dom
# ESLint
$ yarn add eslint-plugin-react -D
import { mountDom } from '@gera2ld/jsx-dom';
// Create vdom
const vdom = <div>hello</div>;
// Mount as DOM element
const dom = mountDom(vdom);
// Attach to document
document.body.appendChild(dom);
// .eslintrc.js
module.exports = {
plugins: [
// ...
'react',
],
rules: {
// ...
'react/jsx-uses-react': 'error',
},
};
You may also need @babe/preset-react or @babel/plugin-transform-react-jsx to transform JSX with either automatic runtime or classic runtime. See below for Babel configuration for different runtimes, tsconfig.json
/jsconfig.json
is also recommended to provide better type definitions.
When using automatic runtime with Babel, you don't need to import any extra helpers.
// .babelrc
{
// ...
"plugins": [
[
"@babel/plugin-transform-react-jsx",
{ "runtime": "automatic", "importSource": "@gera2ld/jsx-dom" }
]
],
}
// tsconfig.json
{
"compilerOptions": {
"jsx": "react-jsx",
"jsxImportSource": "@gera2ld/jsx-dom",
}
}
Another option is to use classic runtime. Note that you need import JSX from '@gera2ld/jsx-dom'
whereever JSX is used.
// .babelrc
{
// ...
"plugins": [
[
"@babel/plugin-transform-react-jsx",
{
"runtime": "classic",
"pragma": "JSX.h",
"pragmaFrag": "JSX.Fragment"
}
],
],
}
// tsconfig.json
{
"compilerOptions": {
"jsx": "react",
"jsxFactory": "JSX.h",
"jsxFragmentFactory": "JSX.Fragment",
}
}
If you don't need SVG support and want to omit mountDom
, just replace JSX.h
with JSX.hm
:
// pragma/jsxFactory set to "JSX.hm"
document.body.append(<div>hello</div>);
import { VNode, DomNode } from '@gera2ld/jsx-dom';
declare global {
namespace JSX {
type Element = VNode; // use `DomNode` instead if you want to omit `mountDom` and set pragma to `JSX.hm`
}
}
FAQs
Use JSX for HTML elements.
We found that @gera2ld/jsx-dom demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Snyk's use of malicious npm packages for research raises ethical concerns, highlighting risks in public deployment, data exfiltration, and unauthorized testing.
Research
Security News
Socket researchers found several malicious npm packages typosquatting Chalk and Chokidar, targeting Node.js developers with kill switches and data theft.
Security News
pnpm 10 blocks lifecycle scripts by default to improve security, addressing supply chain attack risks but sparking debate over compatibility and workflow changes.