
Research
Supply Chain Attack on Axios Pulls Malicious Dependency from npm
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.
rc-extended
Advanced tools
rc-extended isn't just your average React library. It's a turbocharged toolkit for React development that takes your coding experience to the next level.
With rc-extended, you get more than just syntax sugar. We're talking about a plethora of features designed to supercharge your React projects.
<Await promiseFn={buyRing}>
<DateComponent />
</Await>
Where DateComponent is a child component using the usePromiseData hook:
import { usePromiseData } from 'rc-extended';
function DateComponent() {
const { isPending, isFulfilled, isRejected, result, error } = usePromiseData();
return (
<div>
{isPending && <p>Loading...</p>}
{isFulfilled && <p>Data: {result}</p>}
{isRejected && <p>Error: {error.message}</p>}
</div>
);
}
No more promises left hanging! The Await component lets you resolve promises directly in your markup. Say goodbye to callback hell.
import { For } from "rc-extended"
import { signal } from "rc-extended/store"
const fruits = signal(['Apple', 'Banana', 'Orange', 'Grapes']);
// $each is used to signify that the prop value is a signal
<For $each={fruits}>
{(fruit, i) => (
<div key={i}>{item}</div>
)}
</For>
Meet For, your loop master. It effortlessly loops over arrays and objects, sending data to children while handling replication automatically. Say hello to cleaner and more efficient rendering.
<Switch fallback={<div>No condition matched</div>}>
<Match when={condition1}>
<div>Content for Condition 1</div>
</Match>
<Match when={condition2}>
<div>Content for Condition 2</div>
</Match>
</Switch>
We introduce Switch and Match components, inspired by SolidJS. Control flow in JSX, like you've never seen before. It's like JavaScript switch case, but with a JSX twist.
Behold, the impossible made possible! The Resolve component resolves asynchronous client components. Your mind will be blown.
rc-extended is a treasure trove of features waiting to be discovered. We're talking supercharged hooks like useAsync, useFetch, and useTimeout. Our helpers like sleep and setReturn do the heavy lifting so you can code smarter, not harder.
Ready to experience the next level of React development? It's as easy as:
npm install rc-extended
# or
yarn add rc-extended
Dive into the rc-extended Documentation to explore the full potential of this powerhouse library. Be prepared to uncover even more features that will revolutionize your React projects.
Feel like contributing your own superpowers to rc-extended? Check out our Contribution Guidelines to get started.
rc-extended is open-source and licensed under the MIT License.
Don't wait! Get started today and discover the new heights you can reach with rc-extended.
FAQs
Cybernetically enhanced React components
The npm package rc-extended receives a total of 0 weekly downloads. As such, rc-extended popularity was classified as not popular.
We found that rc-extended demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.

Security News
TeamPCP is partnering with ransomware group Vect to turn open source supply chain attacks on tools like Trivy and LiteLLM into large-scale ransomware operations.