
Security News
Node.js Drops Bug Bounty Rewards After Funding Dries Up
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.
Spectra UI is a library full of functional and themeable components for Vue 3 and written in TypeScript.
This project is still in-development, and is fairly empty still, once it goes into a version 1 release it will be stable to use, but at the moment, it has two components, and both are fairly buggy still :P.
You will need Vue.js version 3.0+.
# npm
npm install spectra-ui --save
# yarn
yarn add spectra-ui
import { createApp } from 'vue';
import Spectra from 'spectra-ui';
import 'spectra-ui/dist/style.css';
createApp.use(Spectra);
import { createApp } from 'vue';
import { Modal, TagInput } from 'spectra-ui';
import 'spectra-ui/dist/style.css';
createApp
.use(Modal)
.use(TagInput);
If you are using npm link or installing it via a local folder npm install ./path/to/spectra-ui then in your config you will need to make sure vue is resolved from your project instead of the linked project, as well as making sure to disable symlinks.
const { resolve } = require('path');
module.exports = {
chainWebpack: (config) => {
config.resolve.symlinks(false);
config.resolve.alias.set('vue$', resolve(__dirname, 'node_modules/vue'));
}
}
FAQs
Spectra UI is a component library built in Vue 3 and TypeScript.
We found that spectra-ui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.