
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@tui/ui-library
Advanced tools
https://web.tui/resources/storybook/
nvm use
npm i
npm run dev
This will spin up:
Installation
To install the latest stable version:
npm install @tui/ui-library or yarn add @tui/ui-library
To install the next major version (be aware it might contain untested features):
npm install @tui/ui-library@next or yarn add @tui/ui-library@next
Themes
Theme files provide some global variables that are needed by the components in order to adhere to the theme guidelines (colors, spacing, etc.). TUI is the only available theme at the moment.
In dist/themes/<<themename>>/, you will find the theme file style.css as well as other global stylesheets. For example, for the TUI theme you
could import in your .js files:
import '@tui/ui-library/dist/themes/tui-light/index.css';
import '@tui/ui-library/dist/themes/tui-light/fonts.css';
Themes variables are declared within the "data-theme" attribute selector, so you will need to add it on either the host page html tag or your MFE:
<html data-theme="tui-light">
<!--or-->
<my-custom-mfe data-theme="tui-light">
<!--or-->
<div data-theme="tui-light"></div
></my-custom-mfe>
</html>
You can also clone this repository, install the dependencies and use npm run dev to run a local server where to check the example templates for the
components, how themes are generated, the original unprocessed stylesheets (post processed with postcss-preset-env), etc.
Please check the contributing document
Please check the migration document
FAQs
TUI UI CSS library
We found that @tui/ui-library demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.