Gathering detailed insights and metrics for @0x/typescript-typings
Gathering detailed insights and metrics for @0x/typescript-typings
Installations
npm install @0x/typescript-typingsDeveloper Guide
BETA
Typescript
No
Module System
N/A
Min. Node Version
>=6.12
Node Version
16.16.0
NPM Version
lerna/3.16.10/node@v16.16.0+arm64 (darwin)
Score
84.9
Supply Chain
89.6
Quality
82.9
Maintenance
100
Vulnerability
100
License
Releases
48
tools - bee0702
tools@bee0702
Published on 07 Apr 2023
tools - c33f74a
tools@c33f74a
Published on 07 Apr 2023
tools - 8c79268
tools@8c79268
Published on 26 Jan 2023
tools - 38f717a
tools@38f717a
Published on 13 Oct 2022
tools - aad2bd4
tools@aad2bd4
Published on 18 Aug 2022
tools - 0787b82
tools@0787b82
Published on 16 Mar 2022
Contributors
86
Unable to fetch Contributors
Languages
7
TypeScript
MDX
Python
JavaScript
Handlebars
Solidity
Dockerfile
TypeScript (65.97%)
MDX (23.63%)
Python (4.88%)
JavaScript (2.83%)
Handlebars (1.59%)
Solidity (1.1%)
Developer
0xProject
Download Statistics
Total Downloads
3,996,119
Last Day
196
Last Week
4,363
Last Month
17,541
Last Year
269,412
GitHub Statistics
100 Stars
16,563 Commits
67 Forks
9 Watching
44 Branches
86 Contributors
Maintainers
10
Package Meta Information
Latest Version
5.3.2
Package Id
@0x/typescript-typings@5.3.2
Unpacked Size
101.61 kB
Size
16.34 kB
File Count
34
NPM Version
lerna/3.16.10/node@v16.16.0+arm64 (darwin)
Node Version
16.16.0
Total Downloads
Cumulative downloads
Total Downloads
3,996,119
Last day
-42.7%
196
Compared to previous day
Last week
-14.2%
4,363
Compared to previous week
Last month
3.7%
17,541
Compared to previous month
Last year
-59.8%
269,412
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
2
Versions
@0x/typescript-typings
Type repository for external packages used by 0x. This is like our small version of DefinitelyTyped
Installation
1yarn add -D @0x/typescript-typings
Usage
Add the following line within an compilerOptions section of your tsconfig.json
1"typeRoots": ["node_modules/@0x/typescript-typings/types", "node_modules/@types"]
This will allow the TS compiler to first look into that repo and then fallback to DT types.
Contributing
We welcome improvements and fixes from the wider community! To report bugs within this package, please create an issue in this repository.
Please read our contribution guidelines before getting started.
Install dependencies
If you don't have yarn workspaces enabled (Yarn < v1.0) - enable them:
1yarn config set workspaces-experimental true
Then install dependencies
1yarn install
Build
To build this package and all other monorepo packages that it depends on, run the following from the monorepo root directory:
1PKG=@0x/typescript-typings yarn build
Or continuously rebuild on change:
1PKG=@0x/typescript-typings yarn watch
Clean
1yarn clean
Lint
1yarn lint
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
Found 3/11 approved changesets -- score normalized to 2
Reason
2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/publish.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/0xProject/tools/publish.yml/development?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/0xProject/tools/publish.yml/development?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/0xProject/tools/publish.yml/development?enable=pin
- Warn: containerImage not pinned by hash: verdaccio/Dockerfile:1: pin your Docker image by updating verdaccio/verdaccio to verdaccio/verdaccio@sha256:58353ed1b53ebb3e6fc2925a5384f70a4aa3ddac7a1402d717a39951e7ab43ad
- Info: 0 out of 3 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 containerImage dependencies pinned
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 24 are checked with a SAST tool
Reason
48 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r
- Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx
- Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-2j2x-2gpw-g8fm
- Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
- Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
- Warn: Project is vulnerable to: GHSA-4q6p-r6v2-jvc5
- Warn: Project is vulnerable to: GHSA-7wwv-vh3v-89cq
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
- Warn: Project is vulnerable to: GHSA-4xcv-9jjx-gfj3
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
- Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
- Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
- Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-584q-6j8j-r5pm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
- Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
- Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
- Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
Score
3
/10
Last Scanned on 2024-12-23
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More