
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
@vscode-elements/elements
Advanced tools
For the end-user documentation, click here. This site is also mirrored at https://vscode-elements.netlify.app, where users behind the GFW can access it more quickly.
This documentation is intended for developers who would like to contribute to or modify the code on their own.
VSCode Elements is based on the Lit library. The local development environment requires NodeJS 22 or newer. If you want to use a local copy of the library in your codebase, you can use the npm link command. First, navigate to the VSCode Elements directory and run:
npm link
Then, go to the library where you want to use it and run:
npm link @vscode-elements/elements
[!WARNING]
Multiple packages must be linked with a single command. For example:
npm link @vscode-elements/elements @vscode-elements/webview-playground
Don't forget to run the build script before using the package.
Install dependencies:
npm ci
package.jsonEach script can be run using the npm run <script_name> format. Wireit is used to cache the script
results.
Build everything. This command generates all the files that will be included in the package. These include:
Transpiles TypeScript files into standard ES6 JavaScript, without minification. These files can then be imported and optimized in the end-user application.
Same as the above, but the TypeScript compiler run in watch mode and recompile the modified files automatically.
Removes the generated files.
Code style check with ESLint.
Automatically fixing code style issues.
Checks code formatting with Prettier.
Automatically fixing code format issues.
Generates a custom elements manifest file. This file is shipped with the package, and it is the file on which the API view in the documentation site is based.
Start the Web Test Runner development server.
Start the development server and the TypeScript compiler in watch mode, then opens the default browser. This is the most used command during the development.
Compiles the test files and runs them. Because tests are written in TypeScript, a transpilation step is also needed.
Same as above, but it also generates coverage.
Watches file changes and runs the tests automatically when any modifications are detected.
Starts the web-test-runner in watch mode without rebuilding any files. It can be run in a separate terminal during development, allowing you to catch new errors as you code.
Displays the file size of the bundled library (dist/bundled.js) in bytes.
Generates icon list for the documentation site. The output of this script should
replace the List of icons section inside
the vscode-elements.github.io/src/content/docs/components/icon.mdx so the docs stay in sync with the latest Codicon set.
Generates HTML and CSS custom data format for VSCode code completions.
FAQs
Web components for creating Visual Studio Code extensions
The npm package @vscode-elements/elements receives a total of 21,302 weekly downloads. As such, @vscode-elements/elements popularity was classified as popular.
We found that @vscode-elements/elements demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.