
Research
/Security News
9 Malicious NuGet Packages Deliver Time-Delayed Destructive Payloads
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.
@uswds/elements
Advanced tools
> [!CAUTION] > Work on USWDS Elements, the Web Component version of the Design System, is happening in this repository. This code may not all be suitable for production use. Please refer to the documentation for each component.
[!CAUTION] Work on USWDS Elements, the Web Component version of the Design System, is happening in this repository. This code may not all be suitable for production use. Please refer to the documentation for each component.
The United States Web Design System includes a library of open source UI components and a visual style guide for U.S. federal government websites.
This repository is for the code for the Web Component-based version of the design system. We maintain another repository for the current version of the design system as well as its documentation and website. To see the design system and its documentation on the web, visit https://designsystem.digital.gov.
Over the course of the next several months (and beyond), we will incrementally build new Web Component-based implementations of design system elements. We intend that, as we ship new Web Components, you will be able to use them existing USWDS components.
We are releasing these Web Components incrementally with the intent that they can also be added incrementally to existing sites that are currently using USWDS. If you are not currently using USWDS or you are using a version older than USWDS 3, we recommend adopting version 3 in the near term rather than waiting until the full suite of Web Components is production-ready.
For now, the best way to install USWDS Elements is via npm:
npm install -S @uswds/elements
How you add the component to a page may vary depending on the tools you use in your project. If you use Vite, you can add components by importing them into a script that is imported elsewhere into a page:
// Importing into a javascript file, like index.js
import { UsaBanner } from "@uswds/elements";
<!-- importing directy into an HTML page -->
<script type="module">
import { UsaBanner } from "@uswds/elements";
</script>
<usa-banner></usa-banner>
[!IMPORTANT] If you are bundling your application using Vite, you may encounter a JavaScript error when using the
usa-bannercomponent with Vite's dev server (this also applies to other Vite-based tools such as Astro). To work around this, you may need to run the dev server in production mode by prefixing the command to start the server withNODE_ENV=production. For instance, if you run the commandnpm run devto start your dev server, you should start it withNODE_ENV=production npm run dev.
For more detailed documention, refer to the project's Storybook. You can visit the most up-to-date Storybook documentation on Cloud.gov Pages.
| Component | Status |
|---|---|
usa-banner | Beta |
usa-link | Pre-alpha |
FAQs
> [!CAUTION] > Work on USWDS Elements, the Web Component version of the Design System, is happening in this repository. This code may not all be suitable for production use. Please refer to the documentation for each component.
The npm package @uswds/elements receives a total of 78 weekly downloads. As such, @uswds/elements popularity was classified as not popular.
We found that @uswds/elements demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 0 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
/Security News
Socket researchers discovered nine malicious NuGet packages that use time-delayed payloads to crash applications and corrupt industrial control systems.

Security News
Socket CTO Ahmad Nassri discusses why supply chain attacks now target developer machines and what AI means for the future of enterprise security.

Security News
Learn the essential steps every developer should take to stay secure on npm and reduce exposure to supply chain attacks.