
Security News
Agent Baseline Publishes Security Reference Architecture for Software Factories
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.
@korala/react
Advanced tools
React components and hooks for embedding Korala document signing in your application.
pnpm add @korala/react
The main component for embedding the signing experience:
import { KoralaSigner } from '@korala/react';
function SigningPage({ signingToken }: { signingToken: string }) {
return (
<KoralaSigner
token={signingToken}
signingUrl="https://sign.yourdomain.com" // Optional, defaults to env var
className="w-full h-[600px]"
onReady={() => console.log('Embed ready')}
onLoaded={(data) => console.log('Document loaded:', data)}
onViewed={(data) => console.log('Document viewed:', data)}
onFieldFilled={(data) => console.log('Field filled:', data)}
onSigned={(data) => console.log('Document signed:', data)}
onDeclined={(data) => console.log('Document declined:', data)}
onError={(data) => console.error('Error:', data)}
/>
);
}
| Prop | Type | Required | Description |
|---|---|---|---|
token | string | Yes | The signer's access token |
signingUrl | string | No | Base URL of the signing app. Defaults to NEXT_PUBLIC_KORALA_SIGNING_URL env var |
className | string | No | CSS class for the iframe |
style | CSSProperties | No | Inline styles for the iframe |
allowedOrigins | string[] | No | Restrict postMessage origins |
onReady | (data) => void | No | Called when embed is initialized |
onLoaded | (data) => void | No | Called when document is loaded |
onViewed | (data) => void | No | Called when signer views the document |
onFieldFilled | (data) => void | No | Called when a field is filled |
onSigned | (data) => void | No | Called when signing is complete |
onDeclined | (data) => void | No | Called when signer declines |
onError | (data) => void | No | Called on errors |
Alternative to callbacks - listen to all events via a hook:
import { useKoralaEvents } from '@korala/react';
function SigningStatus() {
const { status, events, lastEvent } = useKoralaEvents();
return (
<div>
<p>Status: {status}</p>
<p>Events received: {events.length}</p>
</div>
);
}
Returns:
status: 'loading' | 'ready' | 'loaded' | 'viewed' | 'signing' | 'signed' | 'declined' | 'error'events: Array of all received eventslastEvent: Most recent eventclearEvents: Function to clear stored events{
documentId: string;
documentName: string;
signerName: string;
signerEmail: string;
totalFields: number;
requiredFields: number;
}
{
documentId: string;
signerId: string;
signedAt: string;
}
{
documentId: string;
signerId: string;
reason?: string;
declinedAt: string;
}
{
code: string;
message: string;
recoverable: boolean;
}
Set in your .env.local:
NEXT_PUBLIC_KORALA_SIGNING_URL=http://localhost:3003
FAQs
React components and hooks for Korala document signing integration
The npm package @korala/react receives a total of 108 weekly downloads. As such, @korala/react popularity was classified as not popular.
We found that @korala/react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.