Research
Security News
Malicious npm Package Targets Solana Developers and Hijacks Funds
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
@cagov/ds-page-navigation
Advanced tools
Page navigation lists and links to the level 2 headings (H2) of a webpage. It is placed at the top of the page on the left. People can select a link to go directly to that section. The links are introduced by the text **On this page** by default. The page
Page navigation lists and links to the level 2 headings (H2) of a webpage. It is placed at the top of the page on the left. People can select a link to go directly to that section. The links are introduced by the text On this page by default. The page navigation does not show if there are zero or one H2’s on the page.
Page navigation makes it easy to see what’s on a page. It allows people to scan a page and know if they’re in the right place.
Use this component on pages with two or more H2’s. You’ll probably use page navigation on most of your pages.
Do not use this component to replace or duplicate site navigation.
<aside>
<cagov-page-navigation data-selector=".main" data-type="wordpress" data-label="On this page"></cagov-page-navigation>
</aside>
<div class="main">
<h2>First heading</h2>
<h2>Second heading</h2>
<h2>Third heading</h2>
</div>
Property | Value |
---|---|
Machine name | ds-page-navigation |
JavaScript | yes |
SCSS | ./src/index.scss |
The instructions assume familiarity with npm package management tool, modern JavaScript techniques, and Sass.
npm i @cagov/ds-page-navigation
import
¹ or require
to include the component’s JavaScript in your page or compiler.We recommend using a build system and bundling your JavaScript for faster performance. If you do not use a build system, you can include the code from our CDN with a script tag.
<script type="module" src="https://cdn.designsystem.webstandards.ca.gov/components/ds-page-navigation/v2.2.2/dist/index.js"></script>
The following CSS variables are used in this component:
--gray-300
All CSS variables define their own fallback value so you do not have to use additional CSS unless you want to change them. You may define your own value for the variable by adding your own style rules. Here is an example defining the global hex value for a CSS variable named “--primary-700”:
:root {
--primary-700: #165ac2;
}
nav
tag) and has ARIA label (has aria-labelledby
attribute).id
attribute that is referenced in nav’s aria-labelledby
attribute.--accent2-500
variable on focused state.As a component in Alpha status, this component must pass the following accessibility reviews every time a new version is published:
This component uses a custom element defined in JavaScript in addition to HTML and CSS. Edge, Firefox, Safari, and Chrome support custom elements. If the JavaScript for this component is not delivered or supported, the component will not display. This is the desired behavior because this component is not critical for site interaction. It uses CSS variables to inherit design token values. Token definitions are not required because these style rules provide fallback values.
This component uses the following data attributes. We provide this information to help with integrating the component into backend publishing systems or identifying content that may require translation.
Name | Attribute name | Description | Data type | Field type | Default |
---|---|---|---|---|---|
Label | data-label | Label for the page index | string | Plain text | “On this page” |
Selector | data-selector | HTML selector to parse to locate H2 elements | string | Plain text | .main |
Editor type | data-type | Editor | string | Plain text | wordpress (currenly only supports WordPress) |
data-selector
.FAQs
Page navigation lists and links to the level 2 headings (H2) of a webpage. It is placed at the top of the page on the left. People can select a link to go directly to that section. The links are introduced by the text **On this page** by default. The page
We found that @cagov/ds-page-navigation demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
A malicious npm package targets Solana developers, rerouting funds in 2% of transactions to a hardcoded address.
Security News
Research
Socket researchers have discovered malicious npm packages targeting crypto developers, stealing credentials and wallet data using spyware delivered through typosquats of popular cryptographic libraries.
Security News
Socket's package search now displays weekly downloads for npm packages, helping developers quickly assess popularity and make more informed decisions.