Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Shadcn on Rails provides customizable components that you can copy and paste into your apps. Free. Open Source. Use this to build your own component library.
If you're using this, please let me know so I keep developing it.
This is NOT a component library. It's a collection of re-usable components that you can copy and paste into your apps.
What do you mean by not a component library?
I mean you do not install it as a dependency. It is not available or distributed via npm.
Pick the components you need. Copy and paste the code into your project and customize to your needs. The code is yours.
Use this as a reference to build your own component libraries.
Refer to Installation or the Installation page on the demo site.
Clone the repo and run bin/setup
to install dependencies. Then, run bin/dev
to start the
tailwind watcher and then run rails s
. I have to run the server and tailwind separately to keep
debuggers working.
These components are based on the components provided by shadcn/ui. Because
shadcn-ui
is so heavily reliant on Radix and React, these components are most likely not going to
be 1:1 copies of the components provided by shadcn-ui
. However, the goal is to provide the same
components with the same API and the same accessibility features. If you are looking for a React
component library, I highly recommend checking out shadcn/ui.
Licensed under the MIT license.
FAQs
Unknown package
We found that shadcn-ui demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.