
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
@tailwindapp/web-ui
Advanced tools
Component Documentation and Playgrounds here
TailwindApp Web UI is available as an npm package.
# install the package into a React application
npm install @tailwindapp/web-ui
| Build Status | Docs Status |
|---|---|
Here is a quick example to get you started:
import React, {Fragment} from 'react';
import { render } from "react-dom";
import { MessagePopover } from "@tailwindapp/web-ui";
const App = () => (
<Fragment>
<div id="myTarget">My Target</div>
<MessagePopover target={'myTarget'} message={'My Message'} show={true} />
</Fragment>);
render(<App />, document.getElementById("root"));
Clone the repo to your local system and install the packages.
git clone git@github.com:tailwind/web-ui.git
# change into that directory
cd web-ui
# install packages
npm i
Our convention is to create a directory that matches the component name but in snake-case.
So a component named MyTestComponent would be placed inside a directory called
my-test-component. Also, there are 4 required files for each component:
my-test-component.tsx)
my-test-component.test.tsx)my-test-component.stories.tsx)my-test-component.styles.scss)NOTE You can use code generation to create this directory and all files
(as well as adding the export declaration to the src/lib/index.js file).
During development, you'll want to hot-reload the documentation pages. By default, this page will start at
http://localhost:9009/
# generate documentation and reload when files change
npm run docs:watch
We run a standalone CRA (create-react-app) application. You can use the ./src/index.js file as a "playground" environment. By
default, this page will start at http://localhost:3000/tailwind/web-ui.
NOTE The playground file is intentionally ignored in the .gitignore file so you can
edit it as needed for your development purposes.
# start and watch the playground environment
npm run start
npm linkSometimes it is helpful to develop new components in isolation but still review them in context of the final consuming
application. You can use npm link (docs) to create a symlink to the local @tailwindapp/web-ui from the consuming application. (Consuming application would be an application like tailwind/app).
# from the root of your local install of @tailwindapp/web-ui
npm link
npm run start
# from the root of the consuming application
npm link @tailwindapp/web-ui
npm run start # or whatever command used to 'watch' that application
After linking the local library, you can import a component into the consuming application, make changes to that component and see the changes within your consuming application.
Before a component can be imported into another application, it must be exposed to the library. This is done by importing the component and then exporting it as a named component within the ./src/index.js file. For example:
export { MessagePopover } from "./message-popover/message-popover";
export { GridTile } from "./grid-tile/grid-tile-view";
export { Button } from "./button/button";
export { SimpleDropdown } from "./simple-dropdown/simple-dropdown"
Then the external application would import a specific component as a named component:
import { MessagePopover } from '@tailwindapp/web-ui';
To aid in creating a new component with all required files and export declaration, you can use the code generation script
npm run codegen
To deploy a new version of the library, you'll need to tag it and push the tag to Github.
To correctly tag the version use the npm version command. This will bump the version of the package and commit it, along with tagging the git commit.
You should follow semver guidelines for version numbers.
See https://semver.org/ for information on versions and see https://docs.npmjs.com/cli/version for more details on how to use npm version
First, we need to make sure there are no errors by running the two commands.
npm run docs:build
npm run build
Now that we are sure there are no errors, checkout a new branch to make the deployment.
git checkout -b deploy/feature-name
In the new branch, update the version and tag the commit.
npm version patch
Then push the commit and the tag to Github.
git push && git push origin --tags
Create a new pull request.
After merging, AWS will run buildspec.deploy.yml and publish the latest version to NPM.
FAQs
TailwindApp Web UI
We found that @tailwindapp/web-ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 8 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.