
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@reusejs/react-components
Advanced tools
React components for admonitions
<Definition name="Definition name">
Definition text
</Definition>
This will generate a component that looks like this

I've never needed to add a title, so this just takes a child
<Corollary>
Definition text
</Corollary>
Which looks like this:

The example component keeps the main text hidden until you toggle it. This keeps the amount of text on the page down, while allowing for more detail
<Example title="Title">
Content
</Example>
Closed this looks like:

Then on pressing the toggle it looks like:

Important is for important notes, so doesn't take a title
<Important>
An important note
</Important>
This looks like this:

This doesn't have a title, but might need one at some point, raise an issue if it's required
Implemented like this
<Lemma>
Lemma text
</Lemma>

This is defined differently to the others, as all decision problems follow the same structure
<Problem name="k-colourability" instance="A graph G" question="Is there a colouring of G using at most k colours?"/>
And looks like this:

Theorem has the option of name for adding a title, and takes the main content as a child like so:
<Theorem name="Theorem name">
Theorem content
</Theorem>
And looks like this:

FAQs
React components for admonitions
We found that @reusejs/react-components demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.