
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
solid-blocks
Advanced tools
UI building blocks for SolidJS
Wrapping elements like headers, text, or images in custom Components is just wasteful. Components will only be provided if they have added value over their native elements. The added value may be
If none of these advantages can be provided, it is preferable to use native HTML elements or SolidJS' abilities like Portal effectively.
Directly using CSS is frowned upon nowadays, but not rightfully so. Well crafted CSS will easily outperform styled components. It should do so with
sb-[component], CSS reset, basic styles, theme variables).primary.sb-buttonyarn
yarn dev
To use the components
import { Accordion, AccordionHeader } from "solid-blocks";
const MyApp = () => {
return (
<Accordion>
<AccordionHeader>Accordion</AccordionHeader>
<p>Hidden</p>
</Accordion>
);
};
FAQs
UI building blocks for SolidJS
The npm package solid-blocks receives a total of 0 weekly downloads. As such, solid-blocks popularity was classified as not popular.
We found that solid-blocks demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.

Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.

Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.