Big News: Socket raises $60M Series C at a $1B valuation to secure software supply chains for AI-driven development.Announcement
Sign In

@stackone/hub

Package Overview
Dependencies
Maintainers
3
Versions
54
Alerts
File Explorer

Advanced tools

Socket logo

Install Socket

Detect and block malicious and high-risk dependencies

Install

@stackone/hub

StackOne HUB

latest
npmnpm
Version
1.7.1
Version published
Weekly downloads
17K
52.62%
Maintainers
3
Weekly downloads
 
Created
Source

StackOne HUB

License Node Version

StackOne HUB is a React-based integration component library that provides a web component wrapper for seamless integration into any web application. It enables developers to easily embed StackOne's integrations hub.

📋 Table of Contents

🚀 Quick Start

# Clone and setup
git clone <repository-url>
cd hub
npm install
npm run build

# Start development
npm run dev

📦 Installation

Prerequisites

  • Node.js v22.14.0 or higher
  • npm (comes with Node.js)

Setup

  • Clone the repository:

    git clone <repository-url>
    cd hub
    
  • Install dependencies:

    npm install
    
  • Build the project:

    npm run build
    

🛠️ Development

Environment Setup

  • Create environment file:

    cp .env.example .env
    
  • Configure your environment variables (see Environment Variables section)

  • Start the development server:

    npm run dev
    

The Vite dev server starts at http://localhost:3001.

Next.js SSR Sandbox

A second sandbox lives in dev/nextjs/ and runs the hub inside a Next.js 15 + React 19 App Router app. Use it to verify server-side rendering behaviour.

From the repo root:

# First time (builds the hub and installs sandbox deps)
npm run dev:nextjs:setup

# Subsequent runs
npm run dev:nextjs

The Next.js sandbox runs at http://localhost:3002. Set STACKONE_API_KEY in dev/nextjs/.env (see dev/nextjs/.env.example) to have the page fetch a connect-session token server-side, or paste one into the input on the page.

After editing hub source, rerun npm run build from the repo root — the sandbox is linked via file:../.. so it picks up the new dist/ automatically.

🏗️ Build

To build the project for production:

npm run build

Build Output

The build generates multiple bundles in the dist/ directory:

FileDescriptionUse Case
dist/index.esm.jsES module bundle (with 'use client' banner)Modern React apps, Next.js, Vite
dist/index.jsCommonJS module (with 'use client' banner)Node.js / legacy environments
dist/index.d.tsTypeScript declarationsType-checking
dist/webcomponent.jsWeb component bundle (IIFE, React inlined)Vanilla HTML/JS integration

📖 Usage

🌐 Web Component Integration

For vanilla HTML/JavaScript applications:

<!DOCTYPE html>
<html>
<head>
    <title>StackOne HUB Integration</title>
</head>
<body>
    <script src="<TBD>/webcomponent.js"></script>
    <stackone-hub token="..."></stackone-hub>
</body>
</html>

⚛️ React Component Integration

For React applications (CSR — Vite, CRA, etc.):

import { StackOneHub } from "@stackone/hub";

function App() {
  return (
    <div className="app">
      <h1>My Application</h1>
      <StackOneHub token={token} />
    </div>
  );
}

export default App;

StackOneHub is a client-side component — it ships with a 'use client' directive and is safe to import directly in any framework that supports server-side rendering.

▲ Next.js (App Router) Integration

StackOneHub is annotated with 'use client' so you can import it directly from any Server Component. The token can be created server-side (recommended — keeps your API key off the client and avoids the CORS-protected /connect_sessions endpoint), and passed as a prop to a small Client Component that renders the hub.

Important: Add suppressHydrationWarning to the <html> tag in your root layout. The hub applies its theme CSS custom properties to document.documentElement after hydration, which would otherwise trigger a hydration warning on the <html> element (the warning only suppresses the <html> tag itself, not its children):

// app/layout.tsx
export default function RootLayout({ children }) {
  return (
    <html lang="en" suppressHydrationWarning>
      <body>{children}</body>
    </html>
  );
}

app/page.tsx (Server Component):

import HubWrapper from "./HubWrapper";

export default async function Page() {
  const res = await fetch("https://api.stackone.com/connect_sessions", {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      Authorization: `Basic ${Buffer.from(process.env.STACKONE_API_KEY!).toString("base64")}`,
    },
    body: JSON.stringify({
      origin_owner_id: "your_customer_id",
      origin_owner_name: "Your Customer",
      origin_username: "your_username",
    }),
    cache: "no-store",
  });
  const { token } = await res.json();

  return <HubWrapper token={token} />;
}

app/HubWrapper.tsx (Client Component):

"use client";

import { StackOneHub } from "@stackone/hub";

export default function HubWrapper({ token }: { token: string }) {
  return (
    <StackOneHub
      token={token}
      mode="integration-picker"
      onSuccess={(account) => console.log("connected", account)}
    />
  );
}

If you prefer to opt the hub out of SSR entirely (Pages Router, or to skip the server pre-render):

import dynamic from "next/dynamic";

const StackOneHub = dynamic(
  () => import("@stackone/hub").then((m) => m.StackOneHub),
  { ssr: false },
);

A working example lives in dev/nextjs/.

⚠️ "Invalid hook call" — duplicate React

@stackone/hub declares react and react-dom as peer dependencies and the bundle imports them at runtime — your app's copy must be the only copy that ends up loaded. In a standard npm install your bundler will hoist React and you won't see this. But the following setups can leave you with two copies of React and trip the "Invalid hook call" error:

  • Monorepos (npm workspaces, Yarn workspaces, Turborepo) where multiple packages each have their own node_modules/react.
  • pnpm with strict isolation — a transitive copy can shadow the root copy.
  • file: / link: dependencies pointing at a directory that has its own node_modules/react (this is what bit our local Vite sandbox).

Fixes by bundler:

Vite — add resolve.dedupe to your config:

// vite.config.ts
export default defineConfig({
    resolve: {
        dedupe: ['react', 'react-dom', 'react-hook-form'],
    },
});

Webpack / Next.js — usually handled automatically. If not, alias react and react-dom to a single absolute path:

// next.config.mjs
import path from "node:path";
export default {
    webpack: (config) => {
        config.resolve.alias["react"] = path.resolve("./node_modules/react");
        config.resolve.alias["react-dom"] = path.resolve("./node_modules/react-dom");
        return config;
    },
};

pnpm — set public-hoist-pattern[]=react* in .npmrc, or shamefully-hoist=true.

To diagnose, run npm ls react (or pnpm why react) at your app's root — if you see more than one entry resolved to a different path, that's the cause.

💻 Local Development Usage

Web Component (Local)

<script src="dist/webcomponent.js"></script>
<stackone-hub token="..."></stackone-hub>

React Component (Local)

import { StackOneHub } from "../dist/index.esm.js";

function App() {
  return <StackOneHub token={token} />;
}

🔧 Environment Variables

Create a .env file in the dev directory with the following variables:

VariableDescriptionRequired
STACKONE_API_KEYYour StackOne API key
ORIGIN_OWNER_IDThe origin owner identifier
ORIGIN_OWNER_NAMEDisplay name for the owner
ORIGIN_USERNAMEUsername for authentication
API_URLBackend API endpoint URL
DASHBOARD_URLDashboard application URL

Example .env file:

STACKONE_API_KEY=your_api_key_here
ORIGIN_OWNER_ID=your_owner_id
ORIGIN_OWNER_NAME=Your Company Name
ORIGIN_USERNAME=your_username
API_URL=https://api.stackone.com
DASHBOARD_URL=https://dashboard.stackone.com

🤝 Contributing

We welcome contributions and feedback! Please keep in mind:

  • 📋 No formal process yet: Contribution guidelines are still being established
  • 💬 Communication is key: Please open an issue before submitting large changes

Getting Started

  • Fork the repository
  • Create a feature branch
  • Make your changes
  • Test thoroughly
  • Submit a pull request

📄 License

This project is licensed under the MIT License. See the LICENSE file for details.

FAQs

Package last updated on 20 May 2026

Did you know?

Socket

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Install

Related posts