Security News
Research
Data Theft Repackaged: A Case Study in Malicious Wrapper Packages on npm
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
@zendeskgarden/react-theming
Advanced tools
Theming utilities and components within the Garden Design System
The Theming package includes several utility components relating to theming and RTL capabilities in the Garden Design System.
npm install @zendeskgarden/react-theming
# Peer Dependencies - Also Required
npm install react react-dom prop-types styled-components
The ThemeProvider
component can be used to apply granular theming to
Garden (and custom) components as well as providing a RTL context.
It is intended to be used at the root of an application to provide a global context for RTL.
ThemeProvider
components can be nested within each other for areas that require
additional, custom theming.
All themes are auto-prefixed and has access to the props
provided to the component.
import { ThemeProvider } from '@zendeskgarden/react-theming';
import { Notification, Title, Paragraph } from '@zendeskgarden/react-notifications';
const theme = {
'notifications.title': `
&& {
color: red;
:hover {
color: blue;
}
}
`,
'notifications.paragraph': props => (props.purple ? 'color: purple' : '')
};
<ThemeProvider theme={theme}>
<Notification>
<Title>Themed Title (hover as well)</Title>
<Paragraph purple>Custom theme triggered by prop</Paragraph>
</Notification>
</ThemeProvider>;
import { ThemeProvider } from '@zendeskgarden/react-theming';
import { Notification } from '@zendeskgarden/react-notifications';
<ThemeProvider rtl>
<Notification>This notification content will have custom styling.</Notification>
</ThemeProvider>;
The withTheme
HOC utility
allows any component to interact with its ThemeProvider
.
import { withTheme } from '@zendeskgarden/react-theming';
const StyledDiv = ({ theme, children }) => (
<div style={{ direction: theme.rtl ? 'rtl' : 'ltr' }}>{children}</div>
);
const LocalizedComponent = withTheme(StyledDiv);
<ThemeProvider rtl>
<LocalizedComponent>RTL localizable</LocalizedComponent>
</ThemeProvider>;
If you need to compose from other theme overrides e.g. you find yourself overriding the same properties in several components or you're using props to alter your overrides then please see the following code example.
import { ThemeProvider } from '@zendeskgarden/react-theming';
import { Notification, Title, Paragraph } from '@zendeskgarden/react-notifications';
import { css } from 'styled-components';
const commonOverrides = `
&&:hover {
color: blue;
}
`;
const theme = {
'notifications.title': css`
${commonOverrides} && {
color: red;
}
`,
'notifications.paragraph': css`
${commonOverrides} ${props => (props.purple ? 'color: purple' : '')};
`
};
<ThemeProvider theme={theme}>
<Notification>
<Title>Themed Title (hover as well)</Title>
<Paragraph purple>Custom theme triggered by prop</Paragraph>
</Notification>
</ThemeProvider>;
The main difference here is the usage of the css
helper
from styled-components. This will correctly pass down the props from the component so you can conditionally
apply styles based on props or compose from other template literals.
Each component has a COMPONENT_ID
applied so you can target it in your own theme
file to override the default look and feel. This table contains all the ids and which
package they apply to.
<CIDTable />
Theming is meant to be used for small, global changes to a component (i.e accent color, padding changes, etc.)
If you find yourself "skinning" a component, it may be much easier (and maintainable)
if you were to create these presentation assets as standalone components and use
them with our advanced Container
abstractions.
FAQs
Theming utilities and components within the Garden Design System
We found that @zendeskgarden/react-theming demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
Research
The Socket Research Team breaks down a malicious wrapper package that uses obfuscation to harvest credentials and exfiltrate sensitive data.
Research
Security News
Attackers used a malicious npm package typosquatting a popular ESLint plugin to steal sensitive data, execute commands, and exploit developer systems.
Security News
The Ultralytics' PyPI Package was compromised four times in one weekend through GitHub Actions cache poisoning and failure to rotate previously compromised API tokens.