
Research
/Security News
DuckDB npm Account Compromised in Continuing Supply Chain Attack
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
monday-ui-react-core
Advanced tools
Official monday.com UI resources for application development in React.js
monday.com React components library - Storybook
![]() Firefox | ![]() Chrome | ![]() Safari | ![]() iOS Safari | ![]() Samsung | ![]() Opera |
---|---|---|---|---|---|
last 4 versions | last 4 versions | 14+ | last 2 versions | last 2 versions | last 2 versions |
Components are imported from the library's root entry:
import { Button } from "monday-ui-react-core";
In order to load all the relevant CSS tokens, you should import the tokens
file at the root of your application file
import "monday-ui-react-core/tokens";
If your project (or it's Storybook) is importing files differently - read more here.
We don't import fonts ourselves, we work best with the following fonts -
Poppins, Figtree and Roboto, we recommend adding the following link
import to your application
<link
href="https://fonts.googleapis.com/css2?family=Figtree:ital,wght@0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,300;1,400;1,500;1,600;1,700;1,800;1,900&family=Poppins:ital,wght@0,100;0,200;0,300;0,400;0,500;0,600;0,700;0,800;0,900;1,100;1,200;1,300;1,400;1,500;1,600;1,700;1,800;1,900&display=swap"
rel="stylesheet"
/>
We are reliant on React and React DOM, we are using them as externals, and we don't package them to the package, so you must have them in your project
We are using storybook in order to develop the components independently of any consumer. run this to build & run the storybook locally:
yarn storybook
the storybook will be served on http://localhost:7007
When developing locally, we are using a npm functionality called npm link, this allows us to work locally on our package and use it in a different project without publishing. This functionality basically overrides the npm mapping between package name to its repo, and points it to where the package is located locally.
Go to the project's directory and run:
nvm use
npm unlink
npm link
npm start
Theming is supported using CSS variables - for more info on theming please read the theme guidelines file
Components are using style injection on the client side (into element) This is not usable on the server side. In order to get the required styles on the server side, you should initialize
globalThis.injectedStyles = {};
in order to have each server side render component css inserted into the injectedStyles object each component will insert its css string under a unique key. Then you can join all the values into one string and add it under a element
FAQs
Official monday.com UI resources for application development in React.js
We found that monday-ui-react-core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 5 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
/Security News
Ongoing npm supply chain attack spreads to DuckDB: multiple packages compromised with the same wallet-drainer malware.
Security News
The MCP Steering Committee has launched the official MCP Registry in preview, a central hub for discovering and publishing MCP servers.
Product
Socket’s new Pull Request Stories give security teams clear visibility into dependency risks and outcomes across scanned pull requests.