
Security News
New Study Identifies 53 Slopsquatting Targets Across 5 Frontier LLMs
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.
@libreform/react-component
Advanced tools
React component for WP Libre Form. Depends on @libreform/libreform, which is NOT bundled with the package, you have to install it yourself.
npm install @libreform/react-component
If you're feeling wild, you can also drop this repository under your plugins folder and activate the plugin. The component will be available under window.WPLFReactComponent. Please note that using it this way will enqueue react on every page.
Like any other component. Should work just like WPLF works without React. If you need access to the dom node, you can create a ref with useRef() and pass it into the component as property.
import LibreForm from '@libreform/react-component'
function Demo() {
const ref = useRef(null)
return <div>
<h1>Demo</h1>
<LibreForm form="form-slug" ref={ref} className="myClassName" IfErrors={YourErrorComponent} WhileLoading{YourLoadingComponent} />
</div>
}
Only form is required.
{
form: string | number // form id or slug
className?: string // optional custom class name
parentRef?: React.RefObject<HTMLDivElement> // optional React ref
referrerData?: ReferrerData // optional object used for the referrer of the sub
IfErrors?: typeof Errors // react component
WhileLoading?: typeof Loading // react component
callbacks?: {
// List of callbacks to ADD on the form.
// Does NOT remove existing callbacks such as form reset and success message.
[x: string]: List<FormCallback>
}
}
This is just a dangerouslySetInnerHTML wrapper & bindings for WPLF. There's no sanitation. You should know the risks of unrestricted HTML.
FAQs
React component for WP Libre Form
The npm package @libreform/react-component receives a total of 4 weekly downloads. As such, @libreform/react-component popularity was classified as not popular.
We found that @libreform/react-component demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.

Security News
The White House’s Gold Eagle Initiative aims to coordinate AI-discovered vulnerabilities, validate findings, and accelerate patching across critical software.

Security News
A Shai-Hulud infection exposed Suno's source code, which shows the AI music startup stream-ripped tracks to train its models.