
Research
Security News
Malicious npm Package Wipes Codebases with Remote Trigger
A malicious npm typosquat uses remote commands to silently delete entire project directories after a single mistyped install.
RSUITE [ɑː(r)swiːt]
是一套基于 React 开发的 UI 组件库,产生于 HYPERS 前端团队,是面向企业级后台产品的一套前端解决方案。
RSUITE 目标就是让 WEB 开发更快捷,同时具有一定的灵活性和扩展性,致力于改善前端工程师的开发体验。
版本与状态
社区
npm i rsuite --save
示例:
import { Button } from 'rsuite';
ReactDOM.render(<Button>Button</Button>, mountNode);
通过 create-rsuite-app
快速创建一个 RSUITE 应用。 另外,应用中还集成了以下内容:
Redux
: 数据流管理React Router
: 路由管理React Intl
: 国际化ESLint
: 代码检查Webpack
: 应用构建及开发环境搭建Babel
: 代码编译详细参考 dependencies
安装:
npm i -g yo
npm i -g generator-create-rsuite-app
创建项目:
# 创建并进入项目文件夹
mkdir your-project && cd your-project
// 使用脚手架安装项目
yo create-rsuite-app
运行项目:
等待 npm install
安装完成后,执行下面命令,打开 localhost:3002
即可运行项目。
npm run dev
使用中如果存在问题,提交 issues
// 如果需要使用一些拓展组件,应该引入组件样式
@import "~rsuite-table/lib/less/index";
// 引入 RSUITE 样式
@import "~rsuite-theme/dist/less/rsuite";
// 修改主题颜色,不设置则使用 RSUITE 默认颜色
@base-color: #6292f0;
// 可以修改主题中的变量参数,来自定义自己的主题
// 参考 https://github.com/rsuite/rsuite-theme/blob/master/src/less/variables.less
<link rel="stylesheet" href="https://unpkg.com/rsuite-theme/dist/css/rsuite.min.css" />
使用中如果存在问题,提交 issues
FAQs
A suite of react components
The npm package rsuite receives a total of 81,054 weekly downloads. As such, rsuite popularity was classified as popular.
We found that rsuite demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm typosquat uses remote commands to silently delete entire project directories after a single mistyped install.
Research
Security News
Malicious PyPI package semantic-types steals Solana private keys via transitive dependency installs using monkey patching and blockchain exfiltration.
Security News
New CNA status enables OpenJS Foundation to assign CVEs for security vulnerabilities in projects like ESLint, Fastify, Electron, and others, while leaving disclosure responsibility with individual maintainers.