
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
A minimalist React component library based on Tailwind CSS.
npm install @mints/ui
Make sure Tailwind CSS is properly configured in your project.
import { Button } from '@mints/ui';
export default function App() {
return <Button>Click me</Button>;
}
If you're using Tailwind CSS v3 or v4, you need to explicitly include @mints/ui in your Tailwind content array so that Tailwind can detect all class names used by the library.
In your tailwind.config.js or tailwind.config.ts:
export default {
content: [
'./src/**/*.{js,ts,jsx,tsx}',
'./node_modules/@mints/ui/dist/**/*.js', // 👈 Required for Mints UI
],
// ... your theme/plugins/etc
};
Tailwind CSS v4 introduced the @config directive for content-aware builds.
If you're using Tailwind v4 with a CSS entry file (like main.css), make sure to declare your config path at the top of the file:
@config "../tailwind.config.js";
Without this, Tailwind won’t be able to access your configuration and may purge styles used in @mints/ui.
Also confirm your tailwind.config.js includes the following:
export default {
content: [
'./src/**/*.{js,ts,jsx,tsx}',
'./node_modules/@mints/ui/dist/**/*.js', // 👈 Required for Mints UI
],
};
This ensures Tailwind correctly processes class names inside third-party packages like @mints/ui.
MIT
FAQs
A modern React UI component library built with Tailwind CSS
We found that @mints/ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.