
Security News
OWASP 2025 Top 10 Adds Software Supply Chain Failures, Ranked Top Community Concern
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.
@heetch/flamingo-react
Advanced tools
You can see all the components in action here.
From npm:
npm install @heetch/flamingo-react
From yarn:
yarn add @heetch/flamingo-react
Add the CSS globally (the file is used to add CSS variables):
import '@heetch/flamingo-react/dist/styles.css';
You can then import all components directly:
import { Button, Icon, SidePanel } from '@heetch/flamingo-react';
And extend them using styled from Styled Components
Note that not all components are exported as a StyledComponent due to having logic inside, but the building blocks, like Button, Icon, Grid, are all pure Styled Components.
export const FlamingoSpinner = styled(Spinner).attrs(props => ({
size: props.size || 'l',
}))`
margin: ${({ margin }) => margin || '20px auto'};
display: flex;
justify-content: center;
align-items: center;
`;
The @heetch/flamingo-css package is now deprecated as we are now using styled-components
However, you can still use it and browse the files on its latest stable version (v1.12.0)
Each pull request will be automatically deploy on Cloudflare, producing a unique URL such as https://8f508124.flamingo.pages.dev.
Each incremental changes will create a new slug.
Add a new folder in src/components
Name your new folder with your component name.
Each folder should contain :
One index.js
One index.stories.js
One styles.js (if you need specific styling)
Don't forget to export your component in src/components/index.js
All you have to do is add the svg file in src/icons with the correct naming.
Then run
yarn icons || npm icons
it will automatically add your new icon in our icons.js with the correct indentation.
Major.Minor.PatchExample v1.7.4 (1 = Major, 7 = Minor, 4 = Patch)
latest package to npm:npm loginyarn deploy - follow prompts to choose versioning: Major, Minor or Patchnon-latest or prerelease package to npm:npm loginyarn deploy - follow prompts to choose versioning: Prepatch, Preminor, Premajor
If you would like to bump an existing prerelease package (i.e 5.0.1-alpha.0 => 5.0.1-alpha.1)
choose the option: Custom Prerelease then enter the prerelase tag name ("alpha" in this example)MIT © Heetch
FAQs
Heetch Web Design System - Styled Components based
We found that @heetch/flamingo-react demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OWASP’s 2025 Top 10 introduces Software Supply Chain Failures as a new category, reflecting rising concern over dependency and build system risks.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.