CHANGELOG.md

LICENSE

README.md

assets

087069a9f454e2581ed6a7a84b142327.woff2

09cc62a8fbd32c8b28124eecc228bc36.woff2

0a6791447401e0ebd70d98b0e4ecc5ff.woff

0aaeabbaba38453310786c387d4a052a.woff

1b8d46dae0a077f999ae901c213dcbd2.woff

215adb34128fcb20668b963ec7926ef2.ttf

26ebdd3b8f1d039bc3dd95691ce27164.ttf

30dd683b4fcfe95b030b8c07c3482121.ttf

316b1352cc4ab2054de67541c69539d9.woff2

3efee318468995ac04affb6a907a6b03.ttf

43dc3080728216519bf08e82557e1912.ttf

43ea3d39e6aa59fb6f1b4f974dfdc76b.ttf

455d120362f79aa219d465e39fc66e82.woff

4863add4d566a55b6a971780f0328e05.ttf

4a1efbe82eaa84ff89ed34a0bd374991.woff2

4d74f3bda45f5aba1abf8d2a12313b56.ttf

506121dad559538d44eda8fe540f9224.woff2

5a8f743549cc6cef9a001f0c21d55e5b.woff2

5acfe0d0f69444765ba489e2091c95cc.ttf

64da0bc09eaff1000d48c416c82ea2db.png

70e7d719e258c9a7e68b19236a49bcc4.woff

73021f1aabd43f50e16a6a0771c45689.woff

756750acefdb77704c08c235510f6e4c.woff

7b2a6350fcb212efe521caae9cf0d29b.woff

80d8a9aff0d8bdeb966d443e9cfaa19d.woff

8a239a410a47b6192e059fcf26556101.woff

92dd8f0ccfaebc33f817da19369100d8.woff

93511dbad22ceb584f036ab660a563ba.ttf

936869ba46988c2387481468c25686bc.woff2

9a76932911f04be25044af15855ffeb2.ttf

9c5bf2190b2471c2f22b96bb92249ecb.woff2

9caa42f21e4ae090b755f99d14c3a2fd.woff2

a0bcf832ed51501c237c07d8909087e6.woff

a30c1b8fcb759e9fe728873f84044227.woff2

a3246d29b40a8b0da142caea1bc84974.woff

add503b41601df15b97ed98d3ed46c95.woff

af3dd40e0ac8e2ca50ac3943d5d7014d.ttf

b60043e65fa5cbcedb809c19a4cdd4d6.ttf

b6cbc321678701d773c6f86934c55901.woff

b87366633b1019e8c63c28ce979a1d44.ttf

c4e25ab10baa365dfc6620c04ea9202b.woff

c63d4066b0f133fc519f0504abf6ac55.woff2

c6c9fd228e87eefaf1d4e4d8f439760b.woff2

ce3838471d62f8364e125cc74923e05b.ttf

d6f73cf7210d3b5c2fa95f00e38396a2.ttf

d85b43c39f4620dfa5b47b16e842c8a9.woff

da78bf0b1b435f40ca198525361d3b84.ttf

dc8b76b44a8a6e5fad1c8c46568a5951.woff2

e57caf7ea634a258a9b2e06137755ec6.ttf

e5f1a42e1c2b97e2587641dea75c548f.woff2

e7bccfa631a0017f31da9e0c2fd2627b.woff2

e7e051e1bc64fa89931760a52d0c8bd3.woff

ef69f0d737406260319a2c5ec73da3a8.woff2

f1dc10a756c2c544588b7408095ffed7.woff2

f347d9834a5feacbcefb85461ac77e70.woff2

components

Accordion

Accordion.d.ts

Alert

Alert.d.ts

Button

Button.d.ts

Footer

Address

Address.d.ts

Footer.d.ts

FooterExtendedNavList

FooterExtendedNavList.d.ts

FooterNav

FooterNav.d.ts

Logo

Logo.d.ts

SocialLinks

SocialLinks.d.ts

GovBanner

GovBanner.d.ts

Modal

Modal.d.ts

Search

Search.d.ts

SideNav

SideNav.d.ts

Table

Table.d.ts

Tag.d.ts

card

Card

Card.d.ts

CardBody

CardBody.d.ts

CardFooter

CardFooter.d.ts

CardGroup

Announcing our $40M Series B led by Abstract Ventures

@trussworks/react-uswds

haworku

crwallace

bdtrussel

brandon-truss

gidjin

rswerve

devkimallen

shimonatruss

andyfromtruss

suzubara

tinyels

dynamike_truss

sarboc

(Experimental) An ambiguous license classifier was found.

What is an ambiguous license classifier?

Ambiguous License Classifier

Source files are encoded using a non-standard text encoding.

What is bad text encoding?

Bad text encoding

Package version is not a valid semantic version (semver).

What is bad semver?

Bad semver

Package has dependencies with an invalid semantic version. This could be a sign of beta, low quality, or unmaintained dependencies.

What is bad dependency semver?

Bad dependency semver

Source files contain bidirectional unicode control characters. This could indicate a Trojan source supply chain attack. See: trojansource.codes for more information.

What are bidirectional unicode control characters?

Bidirectional unicode control characters

This package has multiple bin scripts with the same name. This can cause non-deterministic behavior when installing or could be a sign of a supply chain attack.

What is bin script confusion?

Bin script confusion

Semantic versions published out of chronological order.

What is a chronological version anomaly?

Chronological version anomaly

Project maintainer's SSH key has been compromised.

What is a compromised SSH key?

Compromised SSH key

(Experimental) Copyleft license information was found.

What do I need to know about license files?

Copyleft License

Contains a Critical Common Vulnerability and Exposure (CVE).

What is a critical CVE?

Title

Critical CVE

Contains a high severity Common Vulnerability and Exposure (CVE).

What is a CVE?

High CVE

Uses debug, reflection and dynamic code execution features.

What is debug access?

Debug access

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

What is a deprecated package?

Deprecated

(Experimental) Contains a known deprecated SPDX license exception.

What is a deprecated SPDX exception?

Deprecated SPDX exception

(Experimental) License is deprecated which may have legal implications regarding the package's use.

What is a deprecated license?

Deprecated license

Package name is similar to other popular packages and may not be the package you want.

What is a typosquat?

Possible typosquat attack

Dynamic require can indicate the package is performing dangerous or unsafe dynamic code execution.

What is dynamic require?

Dynamic require

Package does not contain any code. It may be removed, is name squatting, or the result of a faulty package publish.

What is an empty package?

Empty package

Package accesses environment variables, which may be a sign of credential stuffing or data theft.

What is environment variable access?

Environment variable access

(Experimental) Something was found which is explicitly marked as unlicensed.

Explicitly Unlicensed Item

Package optionally loads a dependency which is not specified within any of the package.json dependency fields. It may inadvertently be importing dependencies specified by other packages.

What are extraneous dependencies?

Name

Extraneous dependency

Contains a dependency which resolves to a file. This can obfuscate analysis and serves no useful purpose.

What are file dependencies?

File dependency

Accesses the file system, and could potentially read sensitive data.

What is filesystem access?

Filesystem access

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

What are wildcard dependencies?

Wildcard dependency

Contains a dependency which resolves to a remote git URL. Dependencies fetched from git URLs are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are git dependencies?

Git dependency

Contains a dependency which resolves to a GitHub URL. Dependencies fetched from GitHub specifiers are not immutable can be used to inject untrusted code or reduce the likelihood of a reproducible install.

What are GitHub dependencies?

GitHub dependency

AI has identified unusual behaviors that may pose a security risk.

What is an AI-detected potential code anomaly?

AI-detected potential code anomaly

AI has identified this package as malware. This is a strong signal that the package may be malicious.

What is AI-detected potential malware?

AI-detected potential malware

AI has determined that this package may contain potential security issues or vulnerabilities.

What are AI-detected potential security risks?

AI-detected potential security risk

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Why is native code a concern?

Native code

@trussworks/react-uswds - npm Package File explorer