
Security News
arXiv Is Rate Limiting Authors Following a Flood of AI Slop Submissions
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.
@polyxd/react
Advanced tools
React renderer for Polyxd UI documents: Radix primitives styled by design-system tokens
Renders Polyxd UI documents in React. Behaviour comes from Radix primitives (the same ones shadcn/ui uses); the look comes entirely from a design-system pack's semantic tokens, compiled to CSS variables. Everything that isn't React (the document types, bindings, formatting, and every decision the renderer makes instead of the model) lives in @polyxd/core, which @polyxd/web shares; a conformance suite in @polyxd/verifier holds the two renderers to the same DOM, ARIA and text.
import { PolyxdSurface } from "@polyxd/react";
import "@polyxd/react/styles.css";
import "@polyxd/react/themes/material3.css"; // one file per pack: carbon.css, polaris.css, govuk.css…
<PolyxdSurface
document={doc} // a Polyxd UI document (validated with @polyxd/spec)
data={hostData} // data comes from the host, never from the model
theme="material3"
mode="light"
onAction={({ name, context }) => handlers[name]?.(context)} // capability intents
onDismiss={() => close()}
resolveMedia={(ref) => imageUrls[ref]} // generated UIs never contain URLs
/>
| Export | What it is |
|---|---|
PolyxdSurface | Renders one document: a screen, panel or dialog. Props above, plus derive (derived data after each input change), density, disclosure, locale, components. |
PolyxdFrame | Renders a shell document (the product's frame: AppBar, Navigation, Outlet, aside, Footer) with your screens as children in the Outlet; current={{ key, title }} marks the navigation and titles the page. |
PolyxdSkeleton | A loading state shaped by a pattern or a shape, for a document that has not arrived. |
useFrame() | The layout the frame chose (side, rail, bar, drawer; compact) for a host's own screens. |
useBindings(), useSurface(), Render | For custom renderers. |
registry | The default renderer map, to wrap or replace per component; also where a Custom's host components go, by namespaced name. |
formatValue, getPointer, setPointer | Formatting and JSON Pointer helpers, re-exported from @polyxd/core. |
preview/polyxd.js | A self-contained browser bundle (window.Polyxd.mount) used by polyxd dev and the editor extension. |
Choice with 2–4 short options renders as a segmented control, 5–10 as radios, more than 10 as a filterable list; a Toggle with an action is a switch, without one a checkbox.Intl.intent (trend → line, comparison → bars, composition → share bar), always show the written takeaway, and include the data as a table.npm run build:themes -w @polyxd/react compiles every packages/ds-* pack into themes/<pack>.css, scoped by [data-pxd-theme][data-pxd-mode]. Only contract tokens are emitted. Each theme also sets shadcn/ui's variable names (--primary, --background, --radius, …), so an existing shadcn app follows the same pack.
Pass components={{ Status: MyStatus }} to replace any component renderer. The default adapter is Radix + tokens; others (for example Astryx, see docs/decisions/0002-astryx.md) plug in the same way.
npm test -w @polyxd/react builds, server-renders every spec example, checks formatting, table, chart and heading semantics, and verifies every pack compiles and the stylesheet only uses contract tokens. The gallery (apps/gallery, npm run dev -w @polyxd/gallery) is for looking at and clicking through every example in every pack, mode and width.
FAQs
React renderer for Polyxd UI documents: Radix primitives styled by design-system tokens
The npm package @polyxd/react receives a total of 465 weekly downloads. As such, @polyxd/react popularity was classified as not popular.
We found that @polyxd/react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.

Research
/Security News
Tensorlake npm SDK version 0.5.144 was compromised in a ChainDrop / Shai-Hulud attack, delivering credential-stealing malware.