
Research
/Security News
Critical Vulnerability in NestJS Devtools: Localhost RCE via Sandbox Escape
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
@kuma-ui/webpack-plugin
Advanced tools
🐻 Kuma UI is a utility-first, zero-runtime CSS-in-JS library that offers an outstanding developer experience and optimized performance.
⚡ Zero-runtime: Deliver blazing-fast websites with zero-runtime CSS extraction.
🔮 Autocomplete: Experience seamless development with style autocompletion.
🛠️ Headless Components: Enjoy maximum customization freedom with our headless components.
🤝 Hybrid Approach: The best of both worlds—support for any writing style with our hybrid approach.
🚀 RSC Support: Stay updated with cutting-edge Next.js technology via our RSC support.
🥇 Familiar DX : Delight in the ultimate DX with our familiar API design.
npm install @kuma-ui/core
For installation instructions and more detailed information, please visit our documentation. Be sure to check out our guide for setting up Kuma UI with your specific framework (Next.js or Vite).
function App() {
return (
<Box as="main" display="flex" flexDir={["column", "row"]}>
<Heading
as="h3"
className={css`
color: red;
@media (max-width: sm) {
color: blue;
}
`}
>
Kuma UI
</Heading>
<Spacer size={4} />
<Flex flexDir={`column`}>
<Text as="p" fontSize={24}>
Headless UI Component Library
</Text>
<Button variant='primary'>Getting Started</Button>
</Flex>
</Box>
);
}
Connect with us on Twitter and Discord to stay up to date with our latest developments, or to provide us with your valuable feedback!
Welcome to Kuma UI, we can't wait to see what you build with it 🐻❄️.
FAQs
🐻 Kuma UI is a utility-first, zero-runtime CSS-in-JS library that offers an outstanding developer experience and optimized performance.
We found that @kuma-ui/webpack-plugin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
A flawed sandbox in @nestjs/devtools-integration lets attackers run code on your machine via CSRF, leading to full Remote Code Execution (RCE).
Product
Customize license detection with Socket’s new license overlays: gain control, reduce noise, and handle edge cases with precision.
Product
Socket now supports Rust and Cargo, offering package search for all users and experimental SBOM generation for enterprise projects.