
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@quietui/quiet
Advanced tools
A UI library for the Web with a focus on accessibility, longevity, performance, and simplicity.
Quiet is an open source user interface library for the modern Web. It features dozens of accessible, performant, and interoperable components along with an optional CSS reset to streamline development of websites and apps.
You might be curious to learn that Quiet's components aren't built with React, Vue, or any other framework. They're custom HTML elements, or Web Components, which means you can use them in plain ol' HTML pages as well as your favorite frameworks.
There are two primary packages for this library:
@quietui/quiet - Use with frameworks and bundlers@quietui/quiet-browser - Use directly in the browser and on CDNsTo launch the development server, use the following commands.
npm i
npm run start
This will launch a browser showing the docs. The browser will reload as you make changes to the project. When you're ready to create a production build, use the following command.
npm run build
The dist folder will contain the files you want.
There are a number of commands you can use to lint and test the library. For a full list of them, run the following command.
npm run
FAQs
A UI library for the Web with a focus on accessibility, longevity, performance, and simplicity.
We found that @quietui/quiet demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.