
Security News
Axios Maintainer Confirms Social Engineering Attack Behind npm Compromise
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.
@xch/meteor-create-react-component
Advanced tools
This is a CLI utility for generating React components in Meteor.
npm i --save-dev @xch/meteor-create-react-component
npx createNewUiComponent [options] <component-name>
Use --help flag to learn more about the options.
npx createNewUiComponent some-component
This creates a new component file at imports/ui/components/some-component/index.js in the Meteor app. If react-redux package is detected in the app, the component file will be renamed to component.js and a Redux container file will be created with the name index.js.
You can customize the behavior of the generators with CLI options. You can also save any option under the "meteor-create-react-component" namespace in your NPM manifest (package.json) to change the default behavior across the project.
CLI options would always take priority but not all options are available.
componentsDirectoryimports/ui/components.useReduxContainertrue to create a react-redux container for the component.react-redux is detected in your project, the default value would be true, otherwise false.component.js while the container would be named index.js.--no-container flag to suppress this option per command.pureComponenttrue to create a pure React component (with an arrow function) instead of a complex one (that extends React.Component).--pure-component flag to activate this option per command.dryRuntrue to see the results described in text without performing any changes.--dry-run flag to activate this option per command.MIT
FAQs
Utility for generating React components in Meteor.
We found that @xch/meteor-create-react-component demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.