
Security News
Axios Supply Chain Attack Reaches OpenAI macOS Signing Pipeline, Forces Certificate Rotation
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.
@perfectthings/ui
Advanced tools
A set of simple, but perfect, UI components, written in Svelte (the only front-end framework worth learning).

npm i -D @perfectthings/ui
You need to import the docs/ui.css into your bundle.
There are many ways to do that. I specifically didn't use any css-to-js imports as these restrict the tools & the setup you may want to have.
The easiest way is probably to add a postinstall script into your package.json that will just copy the file into your dist folder:
...
"postinstall": "cp node_modules/@perfectthings/ui/docs/ui.css ./dist/ui.css"
...
From there - you can just add it directly to the index.html.
Just import them from the module, as normal:
import { Button } from '@perfectthings/ui';
Available from v6.4.0..
Because this is a purely front-end framework and requires browser to work, it will not work with SSR so you need to disable it. Create a file: src/routes/+layout.js and add this:
export const ssr = false;
If you're using SvelteKit, you need to add the ui.css file to the static folder, and then either import it into your global.css file or add it to the head section of your app.html file:
<head>
...
<link rel="stylesheet" href="%sveltekit.assets%/ui.css" />
</head>
Once that's done, you can import the components as normal.
You need node & npm (obviously). Run these:
git clone git@github.com:perfect-things/ui.git perfectthings-ui
cd perfectthings-ui
npm i && npm start
A browser window should open with the demo of the components.
FAQs
Perfect UI components
The npm package @perfectthings/ui receives a total of 22 weekly downloads. As such, @perfectthings/ui popularity was classified as not popular.
We found that @perfectthings/ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
OpenAI rotated macOS signing certificates after a malicious Axios package reached its CI pipeline in a broader software supply chain attack.

Security News
Open source is under attack because of how much value it creates. It has been the foundation of every major software innovation for the last three decades. This is not the time to walk away from it.

Security News
Socket CEO Feross Aboukhadijeh breaks down how North Korea hijacked Axios and what it means for the future of software supply chain security.