
Research
Malicious npm Packages Impersonate Flashbots SDKs, Targeting Ethereum Wallet Credentials
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Simple, accessible, React controls and form elements.
⚠ Until the first stable release (1.0.0) the API is considered unstable and will be changing quite a bit. Use cautiously!
See an online demo.
Install uiuiui as a dependency to your project:
# using npm
npm install uiuiui
# using yarn
yarn add --dev uiuiui
It's bundled for both CJS and ES modules, so either way of using it works:
let uiuiui = require('uiuiui'); // CommonJS
import { Slider } from 'uiuiui'; // ES Modules
You also need some way to import the CSS into your project:
import "uiuiui/build/uiuiui.css"
When I started working on this React UI component library, there were a few things I had in mind:
A control should react to all the subtle interactions available in a browser, which sometimes tend to be ignored. Inclusive Components by Heydon Pickering is an example of things to be mindful of.
A control should delegate as much of the styling as possible to the user, and provide helpful hooks for them to do so. It should be unassuming about the context in which it's going to be used, and that means steering clear of hardcoded dimensions and other anti-patterns which may crop up in React projects.
The project uses a consistent CSS naming system based on the BEM methodology, which I've found makes more sense for me when building complex interfaces.
The project aims to provide the user with useful primitives with which to build they can build their own controls. That means keeping all the components short and sweet, so that rewriting any of them to match your needs is not a hassle. Everything should be swappable.
Along with its main use as a component library to be used directly, the code should be clear and heavily annotated to provide information on how each component is built, how it works, and how one might implement similar components.
To develop uiuiui, see CONTRIBUTING.md.
FAQs
Simple, accessible, React controls and form elements.
The npm package uiuiui receives a total of 35 weekly downloads. As such, uiuiui popularity was classified as not popular.
We found that uiuiui demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Four npm packages disguised as cryptographic tools steal developer credentials and send them to attacker-controlled Telegram infrastructure.
Security News
Ruby maintainers from Bundler and rbenv teams are building rv to bring Python uv's speed and unified tooling approach to Ruby development.
Security News
Following last week’s supply chain attack, Nx published findings on the GitHub Actions exploit and moved npm publishing to Trusted Publishers.