
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@thru/design-system
Advanced tools
Thru Design System - Complete design tokens, components, and utilities for building Thru-branded applications.
Thru Design System - Complete design tokens, components, and utilities for building Thru-branded applications.
npm install @thru/design-system
# or
pnpm add @thru/design-system
The design system uses Tailwind CSS v4 with CSS-first configuration. Import the theme CSS in your main stylesheet:
In your globals.css or main CSS file:
@import "tailwindcss";
@import "@thru/design-system/tailwind.css";
/* Use @source to scan the design system package for class usage */
@source "../node_modules/@thru/design-system/src";
Important notes:
tailwindcss first, then the design system CSS@source directive tells Tailwind v4 to scan the design system's source files for class namesapp/, src/, etc.), so you don't need @source for those@source path should point to the src folder (not dist), so Tailwind can scan the original TypeScript/JSX filesOptional: tailwind.config.js
You typically don't need a tailwind.config.js file with Tailwind v4. If you do need one for other reasons, keep it minimal:
/** @type {import('tailwindcss').Config} */
module.exports = {
// Content paths are defined in CSS via @source directive
// This file is only needed for other Tailwind plugins or custom config
};
import { Button, Input, Card } from '@thru/design-system';
export default function MyPage() {
return (
<Card>
<Input label="Email" placeholder="> Email" />
<Button variant="primary" className="mt-4">
JOIN THE FLOCK
</Button>
</Card>
);
}
// Background
<div className="bg-stone-0">Light background</div>
<div className="bg-stone-100">Light gray background</div>
// Text
<p className="text-stone-700">Dark text</p>
<p className="text-stone-600">Medium-dark text</p>
<button className="bg-thru-brick text-white">
Primary Action
</button>
<div className="bg-thru-saffron-400">Saffron accent</div>
<div className="bg-thru-ocean-400">Ocean accent</div>
<div className="bg-thru-forest-400">Forest accent</div>
<div className="bg-thru-sand-400">Sand accent</div>
The design system uses Inter Tight as the primary font and JetBrains Mono for code.
<h1 className="text-headline-2xl font-extrabold">Headline 2XL</h1>
<h2 className="text-headline-xl font-semibold">Headline XL</h2>
<h3 className="text-headline-l font-semibold">Headline L</h3>
<p className="text-body-m">Body text</p>
<code className="font-mono text-body-s">Code snippet</code>
import { Button } from '@thru/design-system';
// Primary (default)
<Button variant="primary">Action</Button>
// Secondary (Brick color)
<Button variant="secondary">Action</Button>
// Outline
<Button variant="outline">Action</Button>
// Ghost
<Button variant="ghost">Action</Button>
// Sizes
<Button size="sm">Small</Button>
<Button size="md">Medium</Button>
<Button size="lg">Large</Button>
import { Input } from '@thru/design-system';
// With label
<Input label="Email" type="email" placeholder="Enter email" />
// Without label
<Input placeholder="> Email" />
// Error state
<Input error placeholder="Invalid input" />
import { Card } from '@thru/design-system';
// Default (with border)
<Card variant="default">Content</Card>
// Elevated (with shadow)
<Card variant="elevated">Content</Card>
// Outlined (thicker border)
<Card variant="outlined">Content</Card>
See resources/design.md for complete design specifications including:
The design system uses Inter Tight as the primary font and JetBrains Mono for code/monospace text.
Font files are not included in this package. Font files are stored in the resources/Fonts/ directory at the repository root. Each Next.js application should:
resources/Fonts/ to a static directory in the appnext/font/localSee the wallet app implementation (wallet/src/lib/fonts.ts) for an example setup.
If you see unstyled components (e.g., buttons without background colors), Tailwind may not be detecting classes from the design system package.
Solution: Ensure the @source directive in your CSS file points to the correct path. The path is relative to your CSS file location:
app/globals.css, use: @source "../node_modules/@thru/design-system/src"src/styles/globals.css, use: @source "../../node_modules/@thru/design-system/src"Important:
src folder (not dist)@source for external packages@import "tailwindcss" first, then the design system CSSSee package.json for license information.
FAQs
Thru Design System - Complete design tokens, components, and utilities for building Thru-branded applications.
We found that @thru/design-system demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.