
Security News
npm Adopts OIDC for Trusted Publishing in CI/CD Workflows
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.

(A work in progress - All contributions welcome!)
Install the package with you favorite package manager
npm install --save formative
or
yarn add formative
Import into your React component
import React from 'react';
import { useForm } from 'formative';
...
function MyReactFormComponent() {
const {
inputHandlerProps,
useHandleSubmit
} = useForm<Form>(form, schema);
const handleSubmit = useHandleSubmit(() => {
// Async form submission goes here!
alert('submitted');
});
return (
<form onSubmit={handleSubmit}>
<input name="email" {...inputHandlerProps} />
<input type="password" name="password" {...inputHandlerProps} />
<button type="submit">Submit</button>
</form>
);
}
Check out a working example here
Formative is opinionated when it comes to validation.
useForm<Form>(form, schema)
requires 3 things, a TypescriptForm
type, the initialform
object instance, and a Yupschema
. All validation is defined by the Yup schema definition that you provide touseForm
.Note: Currently we only support synchronous Yup validation, async support coming soon.
The
useForm
hook returns auseHandleSubmit
hook that takes your submission callback function. This callback can contain your async form submission logic.
By providing the Typescript type definition to the
useForm<MyFormType>
hook we can provide all the wonders of the Typescript feedback loop and other type safety benefits.
FAQs

The npm package formative receives a total of 287 weekly downloads. As such, formative popularity was classified as not popular.
We found that formative demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
npm now supports Trusted Publishing with OIDC, enabling secure package publishing directly from CI/CD workflows without relying on long-lived tokens.
Research
/Security News
A RubyGems malware campaign used 60 malicious packages posing as automation tools to steal credentials from social media and marketing tool users.
Security News
The CNA Scorecard ranks CVE issuers by data completeness, revealing major gaps in patch info and software identifiers across thousands of vulnerabilities.