
Research
Security News
Malicious npm Package Wipes Codebases with Remote Trigger
A malicious npm typosquat uses remote commands to silently delete entire project directories after a single mistyped install.
Using shadcn-ui components in streamlit
pip install streamlit-shadcn-ui
example:
import streamlit_shadcn_ui as ui
trigger_btn = ui.button(text="Trigger Button", key="trigger_btn")
ui.alert_dialog(show=trigger_btn, title="Alert Dialog", description="This is an alert dialog", confirm_label="OK", cancel_label="Cancel", key="alert_dialog1")
Check docs and compoenent examples in
There is a new component in testing, it will allows you to nest all streamlit-shadcn-ui components together. It will not treat each component as an independent streamlit custom component in iframe, but parse the component structure as data and render them all at once in one iframe.
example (live demo):
with ui.card(key="card1"):
with ui.card(key="card2"):
ui.element("input", key="card2_input")
ui.element("button", key="card2_btn", text="Nest Submmit", variant="outline")
ui.element("button", key="card1_btn", text="Hello World")
There are several scripts in scripts
folder to help you develop this project.
# For local development
./scripts/frontend.sh # frontend dev server
./scripts/dev.sh # streamlit dev server
This repo follows the streamlit custom component structure.
./streamlit_shadcn_ui
is the python package
./streamlit_shadcn_ui/components
is the frontend mono repo
./streamlit_shadcn_ui/components/packages/frontend
is the custom components collection../streamlit_shadcn_ui/components/packages/streamlit-components-lib
is a patch of streamlit-components-lib for react 18 (For now, only the react/react-dom version is changed)../streamlit_shadcn_ui/py_components
is the python level API for components.This repo is under MIT license. See LICENSE for details.
streamlit_shadcn_ui/components/packages/streamlit-components-lib
is under its original Apache-2.0 license. It is a temporal patch for streamlit-components-lib in react 18.
FAQs
Using shadcn components in Streamlit
We found that streamlit-shadcn-ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm typosquat uses remote commands to silently delete entire project directories after a single mistyped install.
Research
Security News
Malicious PyPI package semantic-types steals Solana private keys via transitive dependency installs using monkey patching and blockchain exfiltration.
Security News
New CNA status enables OpenJS Foundation to assign CVEs for security vulnerabilities in projects like ESLint, Fastify, Electron, and others, while leaving disclosure responsibility with individual maintainers.