
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
@opensea/ui-kit
Advanced tools
@opensea/ui-kit
houses our design system components as well as various re-usable utilities and styles.
pnpm add @opensea/ui-kit
or
yarn add @opensea/ui-kit
import { Text } from "@opensea/ui-kit"
import { CircleFilled } from "@opensea/ui-kit/icons"
export const Component = () => {
return (
<>
<Text size="md">Some very nice text</Text>
<Button icon={CircleFilled}>And a button</Button>
</>
)
}
pnpm test:unit
@opensea/ui-kit
comes with multiple entrypoints.
@opensea/ui-kit
~ components & utilities@openase/ui-kit/hooks
~ hooks@openase/ui-kit/icons
~ icons & logos@openase/ui-kit/fs
~ tailwind and filesystem helpers@import "tailwindcss";
@import "tw-animate-css";
@import "@opensea/ui-kit/styles/theme.css";
@source "../node_modules/@opensea/ui-kit/**/*.{ts,tsx,js,jsx}";
Take a look at the @opensea/next-themes package.
Some components like Select have associated compound components (Select.Item
), where Item
is a compound component name. Compound components cannot be used in server components. Instead, use SelectItem
syntax or add 'use client';
directive to the top of the file.
Example that will not work in server components:
import { Select } from "@opensea/ui-kit"
// This will throw an error
export default function Page() {
return <Select.Item size="sm">Hello</Select.Item>
}
Example with 'use client';
directive:
"use client"
import { Select } from "@opensea/ui-kit"
// No error
export default function Page() {
return <Select.Item size="sm">Hello</Select.Item>
}
Example with SelectItem
syntax:
import { SelectItem } from "@opensea/ui-kit"
// No error
export default function Page() {
return <SelectItem size="sm">Hello</SelectItem>
}
FAQs
OpenSea's Design System implementation in React
The npm package @opensea/ui-kit receives a total of 5,344 weekly downloads. As such, @opensea/ui-kit popularity was classified as popular.
We found that @opensea/ui-kit demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 9 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.