
Security News
/Research
Fake Corepack Site Distributes Infostealer and Proxyware to Developers
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.
@tendaui/components
Advanced tools
TendaUI React 组件库的源代码包,包含所有 UI 组件的实现。
在 monorepo 的其他包中使用 workspace 协议安装:
pnpm add @tendaui/components@workspace:*
{
"dependencies": {
"@tendaui/components": "workspace:*"
}
}
import { Button } from "@tendaui/components";
import "@tendaui/components/button/style";
function App() {
return <Button type="primary">点击我</Button>;
}
import { Button, Input, Form } from "@tendaui/components";
import "@tendaui/components/styles/globals.css";
function App() {
return (
<Form>
<Input placeholder="请输入" />
<Button type="primary">提交</Button>
</Form>
);
}
// 导入单个组件的所有导出
import Button from "@tendaui/components/button";
import "@tendaui/components/button/style";
// 或者导入特定文件
import { Button } from "@tendaui/components/button";
import { useConfig, useControlled } from "@tendaui/components/hooks";
import { composeRefs, parseTNode } from "@tendaui/components/utils";
如果需要在 TypeScript 项目中使用,可以在 tsconfig.json 中添加路径映射:
{
"compilerOptions": {
"paths": {
"@tendaui/components": ["../../packages/components"],
"@tendaui/components/*": ["../../packages/components/*"]
}
}
}
tendaui-react 包中使用tendaui-react 包可以依赖 @tendaui/components 来构建最终发布的包:
{
"name": "tendaui-react",
"dependencies": {
"@tendaui/components": "workspace:*"
}
}
在 Storybook 或其他文档工具中直接使用组件:
import { Button } from "@tendaui/components";
import { Meta, Story } from "@storybook/react";
export default {
title: "Components/Button",
component: Button
} as Meta;
在测试文件中导入组件进行测试:
import { render, screen } from "@testing-library/react";
import { Button } from "@tendaui/components";
test("renders button", () => {
render(<Button>Test</Button>);
expect(screen.getByText("Test")).toBeInTheDocument();
});
Alert - 警告提示Badge - 徽标Button - 按钮Checkbox - 复选框ConfigProvider - 全局配置Dialog - 对话框Form - 表单Input - 输入框Loading - 加载中Notification - 通知Popup - 弹出层Select - 选择器SelectInput - 选择输入框Switch - 开关Tag - 标签TagInput - 标签输入框由于这是一个源代码包,修改组件代码后,使用它的包会自动看到更改(如果配置了正确的构建工具)。
如果需要构建这个包,可以添加构建脚本:
{
"scripts": {
"build": "tsc --build"
}
}
FAQs
TendaUI React Components - Source code
The npm package @tendaui/components receives a total of 2 weekly downloads. As such, @tendaui/components popularity was classified as not popular.
We found that @tendaui/components demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
/Research
A fake corepack.org site is impersonating the Node.js tool and delivers an infostealer and proxyware to developers who download it.

Research
/Security News
A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Security News
Five frontier LLMs generated the same nonexistent package names, leaving 53 available for potential slopsquatting across PyPI and npm.