
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@openhands/ui
Advanced tools
A modern React component library built with TypeScript and Tailwind CSS.
Choose your preferred package manager:
# npm
npm install @openhands/ui
# yarn
yarn add @openhands/ui
# pnpm
pnpm add @openhands/ui
# bun
bun add @openhands/ui
import { Button, Typography } from "@openhands/ui";
import "@openhands/ui/styles";
function App() {
return (
<div>
<Typography.H1>Hello World</Typography.H1>
<Button variant="primary">Get Started</Button>
</div>
);
}
| Component | Description |
|---|---|
Button | Interactive button with multiple variants |
Checkbox | Checkbox input with label support |
Chip | Display tags or labels |
Divider | Visual separator |
Icon | Icon wrapper component |
Input | Text input field |
InteractiveChip | Clickable chip component |
RadioGroup | Radio button group |
RadioOption | Individual radio option |
Scrollable | Scrollable container |
Toggle | Toggle switch |
Tooltip | Tooltip overlay |
Typography | Text components (H1-H6, Text, Code) |
Use your preferred package manager to install dependencies and run the development server. We recommend using Bun for a fast development experience.
Note: If you plan to make dependency changes and submit a PR, you must use Bun during development.
# Install dependencies
bun install
# Start Storybook
bun run dev
# Build package
bun run build
To test the package in another project without publishing to npm:
# Build the package:
bun run build
# Create a local package:
# This generates a `.tgz` file in the current directory.
bun pm pack
# Install in your target project:
# Replace `path/to/openhands-ui-x.x.x.tgz` with the actual path to the generated `.tgz` file.
npm install path/to/openhands-ui-x.x.x.tgz
This package is automatically published to npm when a version bump is merged to the main branch. See PUBLISHING.md for detailed information about the publishing process.
MIT
FAQs
OpenHands UI Components
The npm package @openhands/ui receives a total of 14 weekly downloads. As such, @openhands/ui popularity was classified as not popular.
We found that @openhands/ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.