Security News
New Python Packaging Proposal Aims to Solve Phantom Dependency Problem with SBOMs
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
react-polymorphic-box
Advanced tools
Building blocks for strongly typed polymorphic components in React.
Building blocks for strongly typed polymorphic components in React.
Popularized by Styled Components v4, the as
prop allows changing the HTML tag rendered by a component, e.g.:
import { Box } from 'react-polymorphic-box';
import { Link } from 'react-router-dom';
<Box as="a" href="https://github.com/kripod">GitHub</Box>
<Box as={Link} to="/about">About</Box>
While this pattern has been encouraged by several libraries, typings had lacked support for polymorphism, missing benefits like:
as
propA Heading
component can demonstrate the effectiveness of polymorphism:
<Heading color="rebeccapurple">Heading</Heading>
<Heading as="h3">Subheading</Heading>
Custom components like the previous one may utilize the package as shown below.
import * as React from "react";
import { Box, PolymorphicComponentProps } from "react-polymorphic-box";
// Component-specific props should be specified separately
export interface HeadingOwnProps {
color?: string;
}
// Merge own props with others inherited from the underlying element type
export type HeadingProps<
E extends React.ElementType
> = PolymorphicComponentProps<E, HeadingOwnProps>;
// An HTML tag or a different React component can be rendered by default
const defaultElement = "h2";
export function Heading<E extends React.ElementType = typeof defaultElement>({
color,
style,
...restProps
}: HeadingProps<E>): JSX.Element {
// The `as` prop may be overridden by the passed props
return <Box as={defaultElement} style={{ color, ...style }} {...restProps} />;
}
Alternatively, you can also type your custom components by using the PolymorphicComponent
type. This is especially handy when working with external libraries that already expose polymorphic components. Here's an example implementing the Heading component from above using styled-components:
import { PolymorphicComponent } from "react-polymorphic-box";
import styled from "styled-components";
// Component-specific props
interface HeadingProps {
color?: string;
}
// An HTML tag or a different React component can be rendered by default
const defaultElement = "h2";
const Heading: PolymorphicComponent<
HeadingProps, // Merged with props from the underlying element type
typeof defaultElement // Default element type (optional, defaults to 'div')
> = styled(defaultElement)<HeadingProps>`
color: ${(props) => props.color};
`;
Library authors should consider encapsulating reusable components, passing a ref through each of them:
import * as React from "react";
import { Box } from "react-polymorphic-box";
export const Heading = React.forwardRef(
<E extends React.ElementType = typeof defaultElement>(
{ ref, color, style, ...restProps }: HeadingProps<E>,
innerRef: typeof ref
) => {
return (
<Box
ref={innerRef}
as={defaultElement}
style={{ color, ...style }}
{...restProps}
/>
);
}
) as <E extends React.ElementType = typeof defaultElement>(
props: HeadingProps<E>
) => JSX.Element;
FAQs
Building blocks for strongly typed polymorphic components in React.
We found that react-polymorphic-box demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
PEP 770 proposes adding SBOM support to Python packages to improve transparency and catch hidden non-Python dependencies that security tools often miss.
Security News
Socket CEO Feross Aboukhadijeh discusses open source security challenges, including zero-day attacks and supply chain risks, on the Cyber Security Council podcast.
Security News
Research
Socket researchers uncover how threat actors weaponize Out-of-Band Application Security Testing (OAST) techniques across the npm, PyPI, and RubyGems ecosystems to exfiltrate sensitive data.