
Security News
Another Round of TEA Protocol Spam Floods npm, But It’s Not a Worm
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.
@cagov/ds-feedback
Advanced tools
The page feedback component lets people react to specific pages on your website. It puts the question, "Did you find this page useful?" above the department footer on every page. It has buttons to reply **Yes** or **No**, followed by a comment field.
The page feedback component lets people react to specific pages on your website. It puts the question, "Did you find this page useful?" above the department footer on every page. It has buttons to reply Yes or No, followed by a comment field.
The page feedback component is intended to:
Page feedback responses are collected in a Google Analytics report. It does not collect information about the people who submit feedback.
When you install the page feedback component, it is automatically added to every page on your site.
Monitor the information you receive through page feedback so you know user sentiment and can catch problems early.
If you’re interested in using page feedback on your site, contact us through the Support page to get more information.
Do not use the page feedback component on pages that are part of a transactional process flow. This can distract people from finishing their task.
<cagov-feedback data-endpoint-url="https://fa-go-feedback-001.azurewebsites.net/sendfeedback"></cagov-feedback>
| Property | Value |
|---|---|
| Machine name | ds-feedback |
| JavaScript | yes |
| SCSS | ./src/css/index.scss |
The instructions assume familiarity with npm package management tool, modern JavaScript techniques, and Sass.
npm i @cagov/[machine-name]import¹ or require to include the component’s *JavaScript** in your page or compiler.data-endpoint-url="" attribute for the endpoint to POST data to if the user submits a comment.comment, helpful, url, userAgentThe following CSS variables are used in this component
--primary-dark-colorAll CSS variables define their own fallback value so you do not have to use additional CSS unless you want to change them. You may define your own value for the variable by adding your own style rules. Here is an example defining the global hex value for a CSS variable named “—primary-color”:
:root {
--primary-color: #064e66;
}
textarea has id attribute that is referenced in its label’s for attribute.—-highlight-color variable on focused state.Components in Alpha status must pass the following accessibility reviews every time a new version is published:
[axe](https://www.deque.com/axe/) accessibility tool and passes all automated WCAG Level AA checksComponents in Beta status must pass the following accessibility reviews every time a new version is published:
[axe](https://www.deque.com/axe/) accessibility tool and passes all automated WCAG Level AA checksThis component uses a custom element defined in JavaScript in addition to HTML and CSS. Edge, Firefox, Safari, and Chrome support custom elements. If the JavaScript for this component is not delivered or supported, the component will not display. This is the desired behavior because this component is not critical for site interaction. It uses CSS variables to inherit design token values. Token definitions are not required because these style rules provide fallback values.
This component uses the following data attributes. We provide this information to help with integrating the component into backend publishing systems or identifying content that may require translation.
| Name | Attribute name | Data type | Field type | Description |
|---|---|---|---|---|
| Endpoint URL | data-endpoint-url | string | URL | Required field. Endpoint used to POST data if the user submits a comment. |
| Question label | data-question | string | Plain text | Did you find what you were looking for? |
| Yes label | data-yes | string | Plain text | Yes |
| No label | data-no | string | Plain text | No |
| Comment prompt | data-commentPrompt | string | Plain text | What was the problem? |
| Positive comment prompt | data-positiveCommentPrompt | string | Plain text | Great! What were you looking for today? |
| Thanks for feedback message | data-thanksFeedback | string | Plain text | Thank you for your feedback! |
| Thanks for comments message | data-thanksComments | string | Plain text | Thank you for your comments! |
| Submit button label | data-submit | string | Plain text | Submit |
| Required field label | data-requiredField | string | Plain text | This field is required |
| Comment prompt label | data-anythingToAdd | string | Plain text | If you have anything to add |
| Additional feedback label | data-anyOtherFeedback | string | Plain text | If you have any other feedback about this website |
Values that this component will post:
| Name | POST attribute name | Data type | Field type | Value |
|---|---|---|---|---|
| URL | url | string | URL | window.location.href |
| If page was helpful | helpful | string | Plain text | this.wasHelpful |
| Feedback comments | comments | string | Plain text | feedback.value |
| User Agent | userAgent | string | Plain text | navigator.userAgent |
FAQs
The page feedback component lets people react to specific pages on your website. It puts the question, "Did you find this page useful?" above the department footer on every page. It has buttons to reply **Yes** or **No**, followed by a comment field.
We found that @cagov/ds-feedback demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 7 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Recent coverage mislabels the latest TEA protocol spam as a worm. Here’s what’s actually happening.

Security News
PyPI adds Trusted Publishing support for GitLab Self-Managed as adoption reaches 25% of uploads

Research
/Security News
A malicious Chrome extension posing as an Ethereum wallet steals seed phrases by encoding them into Sui transactions, enabling full wallet takeover.