
Research
/Security News
Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.
@wick-charts/react
Advanced tools
High-performance canvas timeseries charts for React — candlestick, line, bar, pie. Tree-shakeable, zero runtime deps.
High-performance timeseries charts for React, Vue, and Svelte. Canvas-rendered, tree-shakeable, zero runtime dependencies.
createTheme() for custom palettesnpm install @wick-charts/react
import {
ChartContainer, CandlestickSeries, Tooltip,
Crosshair, YAxis, TimeAxis
} from '@wick-charts/react';
function Chart({ data }) {
return (
<ChartContainer>
<CandlestickSeries data={data} />
<Tooltip />
<Crosshair />
<YAxis />
<TimeAxis />
</ChartContainer>
);
}
Every component, prop, type, and slot context lives in the docs site:
mo4islona.github.io/wick-charts/#/api/chart-container
Start there for ChartContainer, then drill into the series (Candlestick, Line, Bar, Pie, Sparkline) and overlays (Tooltip, InfoBar, Crosshair, Legend, YAxis, XAxis, Navigator, …).
Tree-shaken React scenarios via pnpm size (esbuild, minified, browser target, React/ReactDOM external):
| Scenario | Raw | Gzip | Brotli |
|---|---|---|---|
| Candlestick only | 147 KB | 44 KB | 38 KB |
| Line only | 147 KB | 44 KB | 38 KB |
| Full React | 164 KB | 49 KB | 41 KB |
Upgrading across versions? See MIGRATION.md for per-version breaking-change notes and code snippets.
MIT
FAQs
High-performance canvas timeseries charts for React — candlestick, line, bar, pie. Tree-shakeable, zero runtime deps.
The npm package @wick-charts/react receives a total of 9 weekly downloads. As such, @wick-charts/react popularity was classified as not popular.
We found that @wick-charts/react demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
A mini Shai-Hulud campaign compromised Red Hat Cloud Services npm packages to steal developer and CI/CD secrets during installation.

Research
/Security News
The North Korean malware loader hides in a Packagist-listed package and its GitHub branch to fetch and execute remote code in a likely Contagious Interview-style lure.

Security News
The Rust project is moving toward formal rules on LLM use in contributions after months of internal debate over maintainer burden, code quality, and contributor experience.