
Security News
Attackers Are Hunting High-Impact Node.js Maintainers in a Coordinated Social Engineering Campaign
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.
desy-html
Advanced tools
desy-html contains the code you need to start building a user interface for Gobierno de Aragón government webapps.
An NPM library for building user interfaces for Government of Aragón web applications. It uses Vite, Tailwind CSS and Nunjucks to render HTML+CSS+JS components. It's useful to create lightweight webapps or HTML mockups.
desy-html is the core design system library that provides:
If you need a more powerful library based on this, use its Angular port instead: desy-angular
To start a new project that uses desy-html as dependency, don't use this repo, use the desy-html-starter repo instead:
Before you begin, ensure you have the following installed:
git clone https://bitbucket.org/sdaragon/desy-html.git
cd desy-html
npm install
npm run dev
This starts the Vite development server with hot module replacement. Open your browser at the URL displayed in the terminal output.
npm run build
This compiles HTML, purges and minifies CSS, and optimizes JavaScript into the /dist folder.
npm run preview
desy-html/
├── public/
│ └── images/ # Library images
├── src/
│ ├── css/ # Stylesheets
│ ├── js/ # JavaScript files
│ │ ├── aria/ # ARIA component implementations
│ │ ├── desy-html.js # Main component exports
│ │ ├── headroom.min.js # Headroom.js library
│ │ └── index.js # Entry point
│ ├── templates/
│ │ ├── components/ # UI component macros
│ │ ├── includes/ # Reusable template partials
│ │ └── pages/ # Page templates
│ ├── main.js # Main entry point
│ └── EUPL-1.2.txt # License file
├── docs/ # Documentation files
├── branding/ # Branding assets and configuration
├── vite.config.js # Vite configuration
├── package.json
└── README.md
desy-html can be customized for different government organizations.
To customize:
branding/branding.config.js with your organization's information/branding/logos/npm run buildSee branding/BRANDING.md for complete documentation.
The project uses Tailwind CSS v4. All Tailwind utility classes are available in your templates:
<div class="flex items-center gap-4 p-6 bg-white rounded-lg shadow">
<h1 class="text-2xl font-bold text-gray-900">Hello World</h1>
</div>
desy-html provides CSS custom properties (variables) for consistent theming. These are included in the main stylesheet.
Images are stored in public/images/ and can be referenced in templates using the /images/ path:
<img src="/images/my-image.png" alt="Description">
During production builds, images are automatically optimized using Sharp:
The development server supports HMR. Changes to CSS, JavaScript, and templates will automatically refresh in the browser.
| Command | Description |
|---|---|
npm run dev | Start development server with HMR |
npm run build | Build for production |
npm run preview | Preview production build locally |
All desy-html components are built with accessibility in mind:
The project targets modern browsers. For specific compatibility information, refer to the desy documentation.
desy-html is maintained by a team at SDA Servicios Digitales de Aragón (Spain). If you want to know more about desy-html, please email any of the commiters.
SDA Servicios Digitales de Aragón
This project is licensed under the EUPL-1.2 license.
For more information and detailed component documentation, visit https://desy.aragon.es/
FAQs
desy-html contains the code you need to start building a user interface for Gobierno de Aragón government webapps.
The npm package desy-html receives a total of 175 weekly downloads. As such, desy-html popularity was classified as not popular.
We found that desy-html demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 2 open source maintainers collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
Multiple high-impact npm maintainers confirm they have been targeted in the same social engineering campaign that compromised Axios.

Security News
Axios compromise traced to social engineering, showing how attacks on maintainers can bypass controls and expose the broader software supply chain.

Security News
Node.js has paused its bug bounty program after funding ended, removing payouts for vulnerability reports but keeping its security process unchanged.