
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
A disruptive UI toolkit
Optimized for TypeScript
Highly customizable but looks great out of the box.
Compatible with mui large library of components
Default design system carefully crafted by Marc Hufschmitt
This project is under active development. It's APIs are susceptible to change until v1.
disiz is largely inspired by onyxia-ui
WARNING: disiz isn't currently working with SSR. (You can't use it with Next.js)
Material-ui is at it's core a vanilla JavaScript library.
We argue that the experience for TypeScript developers is not optimal and somewhat frustrating.
Also we find problematic how hard it is to build an app that won't break on any other screen size.
In consequence, we wanted to create a ui toolkit that would be compatible with
mui v5 large library of components but that would also improves it in the following ways:
yarn add disiz @mui/material @emotion/react @emotion/styled
# If you plan on using icons from: https://mui.com/components/material-icons/
yarn add @mui/icons-material
At this stage, the documentation is under the form of a very simple demo project.
The actual theme configuration happens here.
If you want to experiment with it you can run the demo app with:
NOTE for Storybook users: As of writing this lines storybook still uses by default emotion 10.
mui and TSS runs emotion 11 so there is some changes
to be made to your .storybook/main.js to make it uses emotion 11.
git clone https://github.com/InseeFrLab/disiz
cd disiz
yarn
yarn build
yarn start
FAQs
A uli toolkit, like material-ui but with stronger typing and more opinionated
The npm package disiz receives a total of 2 weekly downloads. As such, disiz popularity was classified as not popular.
We found that disiz demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.