
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@multiversx/sdk-dapp-core-ui
Advanced tools
A library to hold UI components for a dApp on the MultiversX blockchain
A library to hold UI components for a dApp on the MultiversX blockchain
To start building a new web component using Stencil, clone this repo to a new directory:
git clone https://github.com/multiversx/mx-sdk-dapp-core-ui.git my-component
cd my-component
git remote rm origin
and run:
npm install
npm start
To build the component for production, run:
npm run build
To run the unit tests for the components, run:
npm test
Need help? Check out our docs here.
When creating new component tags, we recommend not using stencil in the component name (ex: <stencil-datepicker>). This is because the generated component has little to nothing to do with Stencil; it's just a web component!
Instead, use a prefix that fits your company or any name for a group of related components. For example, all of the Ionic-generated web components use the prefix ion.
There are two strategies we recommend for using web components built with Stencil.
The first step for all two of these strategies is to publish to NPM.
You can read more about these different approaches in the Stencil docs.
If your Stencil project is built with the dist output target, you can import a small bootstrap script that registers all components and allows you to load individual component scripts lazily.
For example, given your Stencil project namespace is called my-design-system, to use my-component on any website, inject this into your HTML:
<script type="module" src="https://unpkg.com/my-design-system"></script>
<!--
To avoid unpkg.com redirects to the actual file, you can also directly import:
https://unpkg.com/foobar-design-system@0.0.1/dist/foobar-design-system/foobar-design-system.esm.js
-->
<my-component first="Stencil" middle="'Don't call me a framework'" last="JS"></my-component>
This will only load the necessary scripts needed to render <my-component />. Once more components of this package are used, they will automatically be loaded lazily.
You can also import the script as part of your node_modules in your applications entry file:
import 'foobar-design-system/dist/foobar-design-system/foobar-design-system.esm.js';
Check out this Live Demo.
If you are using a Stencil component library with dist-custom-elements, we recommend importing Stencil components individually in those files where they are needed.
To export Stencil components as standalone components make sure you have the dist-custom-elements output target defined in your stencil.config.ts.
For example, given you'd like to use <my-component /> as part of a React component, you can import the component directly via:
import 'foobar-design-system/my-component';
function App() {
return (
<>
<div>
<my-component
first="Stencil"
middle="'Don't call me a framework'"
last="JS"
></my-component>
</div>
</>
);
}
export default App;
Check out this Live Demo.
FAQs
A library to hold UI components for a dApp on the MultiversX blockchain
We found that @multiversx/sdk-dapp-core-ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 10 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.