Research
Security News
Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
@code.gov/code-gov-style
Advanced tools
Style for code.gov including buttons, banners, and cards. Inspired by and somewhat based on USWDS.
Style for code.gov including buttons, banners, and cards. Inspired by and somewhat based on USWDS.
All style components are viewable online.
As our code base expands, maintaining and remembering all the CSS class names has become difficult. The code.gov Style Guide makes the search and usage of CSS classes easier by providing examples of their usage. These styles are not meant for usage outside of code.gov. Feel free to fork this though if you want to create your own style guide :-)
The repository is distributed with npm. After installing npm, you can install code-gov-style
with this command:
$ npm i @code.gov/code-gov-style
This package is meant to be used with the code-gov-front-end project. Please follow the configuration settings for the project.
You may want to view your style changes in the code-gov-style repo on your local machine for testing. Follow these steps to do so:
code-gov-style
repository.npm install
to install the dependencies required for the package in the code-gov-style
directory.npm link
in the root level of the code-gov-style
directory on your local machine.code-gov-front-end
project, clone the repository and run npm install
if you haven’t done this already.npm link @code.gov/code-gov-style
in the root level of the code-gov-front-end directory on your local machine.You are now using the latest version of the code.gov design system via your cloned version when running the code-gov-front-end
site on your local machine. To stop using this version, run npm unlink @code.gov/code-gov-style
from the root level of the code-gov-front-end
directory.
We use the fa-search icon from Font Awesome. Font Awesome released their fa-search icon under this license https://creativecommons.org/licenses/by/4.0/
We copy-pasted some code from the hamburgers
library to _hamburgers.scss
. Hamburgers was created by Jonsuh. Hamburgers is released under the MIT License and can be found here https://github.com/jonsuh/hamburgers/blob/master/LICENSE as well as in the licenses folder in this repository.
Have a question? Check out our FAQS. If it's not there, feel free to post an issue or email us :-)
Contact Daniel J. Dufour at daniel.dufour@gsa.gov if you have any questions
FAQs
Style for code.gov including buttons, banners, and cards. Inspired by and somewhat based on USWDS.
The npm package @code.gov/code-gov-style receives a total of 10 weekly downloads. As such, @code.gov/code-gov-style popularity was classified as not popular.
We found that @code.gov/code-gov-style demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 3 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket’s threat research team has detected six malicious npm packages typosquatting popular libraries to insert SSH backdoors.
Security News
MITRE's 2024 CWE Top 25 highlights critical software vulnerabilities like XSS, SQL Injection, and CSRF, reflecting shifts due to a refined ranking methodology.
Security News
In this segment of the Risky Business podcast, Feross Aboukhadijeh and Patrick Gray discuss the challenges of tracking malware discovered in open source softare.