
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
react-uncached-image
Advanced tools
React image component that bypasses caching using query param cache busting.
Read the official documentation.
👁️ Live Demo
An UncachedImage adds a cache-busting query param to your image src to ensure the browser requests the image from the server on every render.
img
img supports, like src and alt.If this project helped save you time, please consider buying me a coffee, which powers my development (and life). Your support is much appreciated!
npm i react-uncached-image
import { UncachedImage } from "react-uncached-image";
Use just like you would a normal img tag in React:
<UncachedImage src="https://loremflickr.com/320/240" />
Now this image will be fetched from the server on every render.
See UncachedImage for more information and a live, interactive example.
Type definitions have been included for TypeScript support.
Favicon by Twemoji.
Open source software is awesome and so are you. 😎
Feel free to submit a pull request for bugs or additions, and make sure to update tests as appropriate. If you find a mistake in the docs, send a PR! Even the smallest changes help.
For major changes, open an issue first to discuss what you'd like to change.
If you found this project helpful, let the community know by giving it a star: 👉⭐
Want to support the project? Feel free to grab me a coffee, which is my main source of fuel for development:
See LICENSE.md.
FAQs
React image component that bypasses caching using query param cache busting.
The npm package react-uncached-image receives a total of 120 weekly downloads. As such, react-uncached-image popularity was classified as not popular.
We found that react-uncached-image demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.