
Security News
PHP Foundation Says Chainguard Broke Security Embargo Ahead of Emergency Patches
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.
@maple-kit/react
Advanced tools
React bindings for Maple's reviewer controller. Hooks and nothing else — no DOM, no styles, no components.
Pre-release. Every package here is 0.x and makes no compatibility promise.
npm install @maple-kit/react
react is a peer dependency.
@maple-kit/ui is the overlay Maple draws. This package is the state
underneath it, for an application that wants to render review comments in its
own design system and pull in none of @maple-kit/ui.
import { MapleProvider, useComments, useMapleClient } from "@maple-kit/react";
function ReviewList() {
const comments = useComments("open");
const client = useMapleClient();
return (
<ul>
{comments.map((comment) => (
<li key={comment.id} onClick={() => client.select(comment.id)}>
{comment.body}
</li>
))}
</ul>
);
}
<MapleProvider options={{ branch: "feat/checkout" }}>
<ReviewList />
</MapleProvider>;
MapleProvider plus useSyncExternalStore bindings over the controller in
@maple-kit/core/client, each as narrow as the component that reads it:
| Hook | What it returns |
|---|---|
useMaple() | The whole state. Re-renders on every change. |
useMapleClient() | The controller, for setFilter, arm, publish and the rest. Never re-renders. |
useComments() | The comments a filter shows, in render order. |
useComposer() | The composer, open or closed, with its body, attachments and dirtiness. |
usePicker() | Whether a pick is armed, and which kind. |
useAnchor(id) | The anchor behind a comment, a draft, or the open composer. |
useDraft(id?) | The draft the composer is writing into, or the one with the given id. |
useGitHubLink() | The reviewer's GitHub link, or unsupported when the route has no sign-in. |
@maple-kit/react/mock is useMock(), one subscription over
Maple Mock's box controller in @maple-kit/mock/client.
The state machine lives one level below, in core, deliberately: a React hook is not portable, and a controller is.
Apache-2.0. See LICENSE and NOTICE.
FAQs
React bindings for Maple's reviewer controller
The npm package @maple-kit/react receives a total of 139 weekly downloads. As such, @maple-kit/react popularity was classified as not popular.
We found that @maple-kit/react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
The PHP Foundation says Chainguard broke a security embargo ahead of critical RCE patches, as leaks disrupted the coordinated release.

Security News
PHP releases emergency patches for two critical RCE vulnerabilities as agencies urge organizations to take unpatched sites offline.

Threat Research
/Security News
A supply chain attack compromised LiteLLM 1.107.0 on PyPI and Docker, spreading malware that steals cloud credentials, developer secrets, and AI provider keys.