Gathering detailed insights and metrics for @0x/utils
Gathering detailed insights and metrics for @0x/utils
Installations
npm install @0x/utilsDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Min. Node Version
>=6.12
Node Version
16.16.0
NPM Version
lerna/3.16.10/node@v16.16.0+arm64 (darwin)
Score
60.9
Supply Chain
90.7
Quality
80.2
Maintenance
50
Vulnerability
97.3
License
Releases
48
tools - bee0702
tools@bee0702
Published on 07 Apr 2023
tools - c33f74a
tools@c33f74a
Published on 07 Apr 2023
tools - 8c79268
tools@8c79268
Published on 26 Jan 2023
tools - 38f717a
tools@38f717a
Published on 13 Oct 2022
tools - aad2bd4
tools@aad2bd4
Published on 18 Aug 2022
tools - 0787b82
tools@0787b82
Published on 16 Mar 2022
Contributors
86
Unable to fetch Contributors
Languages
7
TypeScript
MDX
Python
JavaScript
Handlebars
Solidity
Dockerfile
TypeScript (65.97%)
MDX (23.63%)
Python (4.88%)
JavaScript (2.83%)
Handlebars (1.59%)
Solidity (1.1%)
Developer
0xProject
Download Statistics
Total Downloads
4,551,364
Last Day
501
Last Week
4,366
Last Month
22,658
Last Year
345,723
GitHub Statistics
100 Stars
16,563 Commits
67 Forks
9 Watching
44 Branches
86 Contributors
Bundle Size
791.10 kB
Minified
246.39 kB
Minified + Gzipped
Maintainers
10
Package Meta Information
Latest Version
7.0.0
Package Id
@0x/utils@7.0.0
Unpacked Size
523.52 kB
Size
113.62 kB
File Count
305
NPM Version
lerna/3.16.10/node@v16.16.0+arm64 (darwin)
Node Version
16.16.0
Total Downloads
Cumulative downloads
Total Downloads
4,551,364
Last day
-46.8%
501
Compared to previous day
Last week
-31.7%
4,366
Compared to previous week
Last month
-2.6%
22,658
Compared to previous month
Last year
-57%
345,723
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
14
Versions
@0x/utils
Utils to be shared across 0x projects and packages
Installation
1yarn add @0x/utils
If your project is in TypeScript, add the following to your tsconfig.json:
1"compilerOptions": { 2 "typeRoots": ["node_modules/@0x/typescript-typings/types", "node_modules/@types"], 3}
Usage
1import { addressUtils, bigNumberConfigs, classUtils, intervalUtils, promisify } from '@0x/utils';
Troubleshooting
If you are still seeing TS type errors complaining about missing DOM types such as Response:
error TS2304: Cannot find name 'Response'.
Then you need to explicitly add the dom lib to your compiler options in tsconfig.json. The dom library is included by default, but customizing the lib option can cause it to be dropped.
"compilerOptions": {
"lib": [..., "dom"],
Contributing
We welcome improvements and fixes from the wider community! To report bugs within this package, please create an issue in this repository.
Please read our contribution guidelines before getting started.
Install dependencies
If you don't have yarn workspaces enabled (Yarn < v1.0) - enable them:
1yarn config set workspaces-experimental true
Then install dependencies
1yarn install
Build
To build this package and all other monorepo packages that it depends on, run the following from the monorepo root directory:
1PKG=@0x/utils yarn build
Or continuously rebuild on change:
1PKG=@0x/utils yarn watch
Clean
1yarn clean
Lint
1yarn lint
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
Found 3/11 approved changesets -- score normalized to 2
Reason
2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/publish.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/0xProject/tools/publish.yml/development?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/0xProject/tools/publish.yml/development?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/0xProject/tools/publish.yml/development?enable=pin
- Warn: containerImage not pinned by hash: verdaccio/Dockerfile:1: pin your Docker image by updating verdaccio/verdaccio to verdaccio/verdaccio@sha256:58353ed1b53ebb3e6fc2925a5384f70a4aa3ddac7a1402d717a39951e7ab43ad
- Info: 0 out of 3 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 containerImage dependencies pinned
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 24 are checked with a SAST tool
Reason
48 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r
- Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx
- Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-2j2x-2gpw-g8fm
- Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
- Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
- Warn: Project is vulnerable to: GHSA-4q6p-r6v2-jvc5
- Warn: Project is vulnerable to: GHSA-7wwv-vh3v-89cq
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
- Warn: Project is vulnerable to: GHSA-4xcv-9jjx-gfj3
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
- Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
- Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
- Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-584q-6j8j-r5pm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
- Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
- Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
- Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
Score
3
/10
Last Scanned on 2024-12-23
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More