pn-react

A set of rules for building user interfaces with React, a JavaScript library based on reusable components.

In plain words
What is it for?
Use it when editing JSX or TSX components, hooks, props, styles, file organization, and interface performance.
Why use it?
It keeps components understandable and helps avoid problems with hooks, naming, overly shared state, excessive prop passing, and unnecessary work in the browser.

Cursor rule

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add rules/perniemann/pncore/pn-react
Clone the repo
git clone --depth 1 https://github.com/perniemann/pnCore
Per session 0 Nothing until a file matches its globs; then the whole rule loads.
When invoked 934 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.00934
Opus 5 $0.00000 $0.00467
Sonnet 5 $0.00000 $0.00187
Haiku 4.5 $0.00000 $0.00093

Measured yesterday against content hash 734fa8a56353, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

pn-react scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

packages/pn-core-mcp/content/rules/pn-react.mdc · 71 lines

How it starts

The opening of the file, as written. The whole thing — 71 lines — stays where its author put it; the contents beside it link to each section on GitHub.

React rules

Component Architecture

  • Prefer function components and hooks. Use const for component names.
  • Keep components focused: one main responsibility. Extract sub-components when a file grows past ~150 lines or a component has more than one conceptual job.
  • Co-locate related files: MyComponent.tsx, MyComponent.test.tsx, MyComponent.module.css in the same folder.
  • Prop types: use TypeScript interfaces; prefer explicit over wide (string not any).
  • Avoid prop drilling beyond 2 levels — use context, zustand, or composition instead.

Naming

  • Components: PascalCase (UserCard, not userCard or user-card)
  • Props and handlers: camelCase (onClick, isLoading, userProfile)
  • CSS classes: kebab-case for BEM; or rely on Tailwind/CSS Modules
  • Files: kebab-case for pages and utilities (user-profile.ts); PascalCase for components (UserProfile.tsx)
  • Boolean props: prefix with is, has, can, should (isOpen, hasError, canEdit)

Hooks

  • Follow Rules of Hooks: only call hooks at the top level, never inside conditions or loops.
  • Extract repeated hook logic into custom hooks (useWindowSize, useDebounce).
  • useEffect cleanup: always return a cleanup function for subscriptions, event listeners, and timers.
  • Avoid useEffect for derived state — compute it during render instead.
  • useMemo and useCallback: use when the computation is expensive or when referential equality matters for child props. Do NOT memo everything by default — it adds complexity without benefit in most cases.

Accessibility

  • Use semantic HTML: <button> for actions, <a> for navigation, <input> with <label>, <h1><h6> in logical order.
  • Every <img> needs alt. Decorative images use alt="".
  • Icon-only buttons require aria-label or aria-labelledby.
  • Interactive elements must be keyboard accessible (focusable, operable with Enter/Space).
  • Never remove focus styles without an accessible replacement.
  • Dynamic content changes: move focus to newly revealed content (modal, error message) when appropriate.

Read the full file on GitHub · 71 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. yesterday First seen · 71 lines · 934 tokens per session scan A 734fa8a56353

Subscribe to this mod's changes

pn-react is a cursor rule published in the GitHub repository perniemann/pnCore (0 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 934 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.