
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
  
Themable shadcn/ui component library with glassmorphism variants, and extra components like the Circular Progress.
Apart from all components being now part of a component library, these are the main differences:
createTailwindPreset(): Switch your theme colors quickly, without having to rewrite CSS vars or classes.color and radius props.Many components having a solid color (for example buttons), will now have a color prop to change the color to one of
default (gray), primary, secondary, danger or warning.
All components that are containers, dialogs or popovers, and have a solid surface / background color will now have these new props to transform them into a glassmorphic style:
variant: default or glass.blur: Allows to customize the blur radius, e.g. xl. Same values as backdrop-blur-* classes.This is a Tailwind CSS component library, so you need to install the package, adjust your tailwind.config.js|ts
configuration and some global styles.
npm install glasscn-ui
import { createTailwindPreset } from 'glasscn-ui'
// Example preset configuration (config object is optional)
const glasscnPreset = createTailwindPreset({
baseRadius: '0.5em',
colors: {
// For primary, secondary, gray, danger and warning colors,
// you can use any Tailwind color name, or a custom color palette.
primary: 'blue',
secondary: 'yellow',
gray: {
50: '#f9fafb',
100: '#f3f4f6',
200: '#e5e7eb',
300: '#d1d5db',
400: '#9ca3af',
500: '#6b7280',
600: '#4b5563',
700: '#374151',
800: '#1f2937',
900: '#111827',
},
danger: 'red',
warning: 'yellow',
background: {
light: '#ffffff',
dark: '#000000',
},
foreground: {
light: '#000000',
dark: '#ffffff',
},
foregroundMuted: {
light: '#9ca3af',
dark: '#6b7280',
},
border: {
light: '#d1d5db',
dark: '#374151',
},
borderMuted: {
light: '#e5e7eb',
dark: '#4b5563',
},
},
})
export default {
content: [
// ...
'./node_modules/glasscn-ui/dist/index.js', // tell Tailwind's JIT to also include glasscn-ui's classes.
],
presets: [glasscnPreset],
}
@tailwind base;
@tailwind components;
@tailwind utilities;
@layer base {
:root {
--background: theme('colors.background.light');
--background-muted: theme('colors.background.muted.light');
--foreground: theme('colors.foreground.light');
--foreground-muted: theme('colors.foreground.muted.light');
--border: theme('colors.border.light');
--border-muted: theme('colors.border.muted.light');
}
.dark {
--background: theme('colors.background.dark');
--background-muted: theme('colors.background.muted.dark');
--foreground: theme('colors.foreground.dark');
--foreground-muted: theme('colors.foreground.muted.dark');
--border: theme('colors.border.dark');
--border-muted: theme('colors.border.muted.dark');
}
*,
::before,
::after {
border-color: var(--border);
}
* {
box-sizing: border-box;
position: relative;
}
[hidden] {
display: none;
}
[inert] {
pointer-events: none;
user-select: none;
}
html {
font-size: 16px;
}
body {
background-color: var(--background);
color: var(--foreground);
}
}
In order to reduce the amount of dependencies and the bundle size and complexity, some components are not included:
If you need these components, install them from the original shadcn/ui.
Component libraries are easier to install and to get updates from, with the downside that they are harder to customize.
You have many customization options via the createTailwindPreset() function, but if you need to modify the components,
you will need to copy-paste their code into your own project instead of importing them from the library.
Containers and popovers:
Button-like:
FAQs
  
The npm package glasscn-ui receives a total of 26 weekly downloads. As such, glasscn-ui popularity was classified as not popular.
We found that glasscn-ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.