Gathering detailed insights and metrics for @11ty/eleventy
Gathering detailed insights and metrics for @11ty/eleventy
A simpler site generator. Transforms a directory of templates (of varying types) into HTML.
Installations
npm install @11ty/eleventyDeveloper Guide
BETA
Typescript
No
Module System
ESM
Min. Node Version
>=18
Node Version
20.19.2
NPM Version
10.8.2
Releases
73
Eleventy v3.1.2 (we fixed 15 more things)
v3.1.2
Updated on Jun 24, 2025
Eleventy v3.1.2-beta.4
v3.1.2-beta.4
Updated on Jun 23, 2025
Eleventy v3.1.2-beta.3
v3.1.2-beta.3
Updated on Jun 20, 2025
Eleventy v3.1.2-beta.2
v3.1.2-beta.2
Updated on Jun 18, 2025
Eleventy v3.1.2-beta.1
v3.1.2-beta.1
Updated on Jun 16, 2025
Eleventy v3.1.1 (we fixed some things)
v3.1.1
Updated on Jun 03, 2025
Languages
8
JavaScript
Nunjucks
Liquid
TypeScript
Vue
HTML
SCSS
MDX
JavaScript (97.63%)
Nunjucks (1.56%)
Liquid (0.55%)
TypeScript (0.1%)
Vue (0.09%)
HTML (0.05%)
SCSS (0.02%)
MDX (0.01%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
18,432 Stars
3,218 Commits
533 Forks
86 Watchers
15 Branches
107 Contributors
Updated on Jul 11, 2025
Sponsor this package
Maintainers
2
Package Meta Information
Latest Version
3.1.2
Package Id
@11ty/eleventy@3.1.2
Unpacked Size
526.95 kB
Size
141.99 kB
File Count
115
NPM Version
10.8.2
Node Version
20.19.2
Published on
Jun 24, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Dependencies
33
@11ty/dependency-tree@11ty/dependency-tree-esm@11ty/eleventy-dev-server@11ty/eleventy-plugin-bundle@11ty/eleventy-utils@11ty/lodash-custom@11ty/posthtml-urls@11ty/recursive-copy@sindresorhus/slugifybcp-47-normalizechokidardebugdependency-graphentitiesfilesizegray-matteriso-639-1js-yamlkleurliquidjsluxonmarkdown-itminimistmoonode-retrieve-globalsnunjuckspicomatchplease-upgrade-nodeposthtmlposthtml-match-helpersemverslugifytinyglobby
Dev Dependencies
33
@11ty/eleventy-img@11ty/eleventy-plugin-rss@11ty/eleventy-plugin-syntaxhighlight@11ty/eleventy-plugin-webc@eslint/eslintrc@eslint/js@iarna/toml@mdx-js/node-loader@types/node@vue/server-renderer@zachleat/noopavac8eslinteslint-config-prettierglobalsjsx-async-runtimemarkdown-it-abbrmarkdown-it-emojimarkednano-stagedprettierprettyreactreact-domrimrafsasssimple-git-hookstsxtypescriptvuezodzod-validation-error
eleventy 🕚⚡️🎈🐀
A simpler static site generator. An alternative to Jekyll. Written in JavaScript. Transforms a directory of templates (of varying types) into HTML.
Works with HTML, Markdown, JavaScript, Liquid, Nunjucks, with addons for WebC, Sass, Vue, Svelte, TypeScript, JSX, and many others!
➡ Documentation
- Please star this repo on GitHub!
- Follow us on Mastodon @eleventy@fosstodon.org or Twitter @eleven_ty
- Join us on Discord
- Support 11ty on Open Collective
- 11ty on npm
- 11ty on GitHub
Installation
npm install @11ty/eleventy --save-dev
Read our Getting Started guide.
Tests
npm run test
- We use the ava JavaScript test runner (Assertions documentation)
- ℹ️ To keep tests fast, thou shalt try to avoid writing files in tests.
- Continuous Integration on GitHub Actions
- Code Coverage Statistics
- Benchmark for Performance Regressions
Community Roadmap
- Top Feature Requests (Add your own votes using the 👍 reaction)
- Top Bugs 😱 (Add your own votes using the 👍 reaction)
Plugins
See the official docs on plugins.
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
1 out of 1 merged PRs checked by a CI test -- score normalized to 10
Reason
33 different organizations found -- score normalized to 10
Details
- Info: contributors work for 11ty,11ty @fortawesome,FortAwesome,GoogleChromeLabs,HTTPArchive,NebraskaJS,NixOS,Offene-Bibel,ResponsiveImagesCG,SearchFeed,andré jaenisch web-development & -consulting,baidu,catppuccin,cc-fiae-2024,ecomfe,everything-registry,expath,factorial gmbh,filamentgroup,gemium,jamstack,lipu-tenpo,microsoft,mipengine,rollup,sheffieldhackspace,simple-icons,tc39,tiktok,w3c,w3ctag,warpdotdev,yazi-rs
Reason
no dangerous workflow patterns detected
Reason
update tool detected
Details
- Info: tool 'Dependabot' is used: .github/dependabot.yml:1
Reason
license file detected
Details
- Info: License file found in expected location: LICENSE:1
- Info: FSF or OSI recognized license: LICENSE:1
Reason
30 commit(s) out of 30 and 24 issue activity out of 30 found in the last 90 days -- score normalized to 10
Reason
publishing workflow detected
Details
- Info: GitHub/GitLab publishing workflow used in run https://api.github.com/repos/11ty/eleventy/actions/runs/15862169054: .github/workflows/release.yml:7
Reason
all dependencies are pinned
Details
- Info: 8 out of 8 GitHub-owned GitHubAction dependencies pinned
- Info: 1 out of 1 third-party GitHubAction dependencies pinned
- Info: 2 out of 2 npmCommand dependencies pinned
Reason
SAST tool is run on all commits
Details
- Info: all commits (8) are checked with a SAST tool
- Info: SAST tool detected: CodeQL
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
GitHub workflow tokens follow principle of least privilege
Details
- Info: topLevel permissions set to 'read-all': .github/workflows/ci.yml:3
- Info: topLevel permissions set to 'read-all': .github/workflows/codeql.yml:23
- Info: jobLevel 'packages' permission set to 'read': .github/workflows/codeql.yml:39
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql.yml:42
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql.yml:43
- Info: topLevel permissions set to 'read-all': .github/workflows/release.yml:5
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/release.yml:10
- Info: topLevel permissions set to 'read-all': .github/workflows/scorecard.yml:18
- Info: no jobLevel write permissions found
Reason
1 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'force pushes' disabled on branch 'main'
- Info: 'allow deletion' disabled on branch 'main'
- Warn: no status checks found to merge onto branch 'main'
- Warn: number of required reviewers is only 1 on branch 'main'
- Info: stale review dismissal enabled on branch 'main'
- Warn: settings do not apply to administrators on branch 'main'
- Info: codeowner review is required on branch 'main'
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
found 23 unreviewed changesets out of 23 -- score normalized to 0
Reason
project is not fuzzed
Details
- Warn: no OSSFuzz integration found: Follow the steps in https://github.com/google/oss-fuzz to integrate fuzzing for your project. Over time, try to add fuzzing for more functionalities of your project. (High effort)
- Warn: no OneFuzz integration found: Follow the steps in https://github.com/microsoft/onefuzz to start fuzzing for your project. Over time, try to add fuzzing for more functionalities of your project. (High effort)
- Warn: no GoBuiltInFuzzer integration found: Follow the steps in https://go.dev/doc/fuzz/ to enable fuzzing on your project. Over time, try to add fuzzing for more functionalities of your project. (Medium effort)
- Warn: no PythonAtherisFuzzer integration found: Follow the steps in https://github.com/google/atheris to enable fuzzing on your project. Over time, try to add fuzzing for more functionalities of your project. (Medium effort)
- Warn: no CLibFuzzer integration found: Follow the steps in https://llvm.org/docs/LibFuzzer.html to enable fuzzing on your project. Over time, try to add fuzzing for more functionalities of your project. (Medium effort)
- Warn: no CppLibFuzzer integration found: Follow the steps in https://llvm.org/docs/LibFuzzer.html to enable fuzzing on your project. Over time, try to add fuzzing for more functionalities of your project. (Medium effort)
- Warn: no SwiftLibFuzzer integration found: Follow the steps in https://google.github.io/oss-fuzz/getting-started/new-project-guide/swift-lang/ to enable fuzzing on your project. Over time, try to add fuzzing for more functionalities of your project. (Medium effort)
- Warn: no RustCargoFuzzer integration found: Follow the steps in https://rust-fuzz.github.io/book/cargo-fuzz.html to enable fuzzing on your project. Over time, try to add fuzzing for more functionalities of your project. (Medium effort)
- Warn: no JavaJazzerFuzzer integration found: Follow the steps in https://github.com/CodeIntelligenceTesting/jazzer to enable fuzzing on your project. Over time, try to add fuzzing for more functionalities of your project. (Medium effort)
- Warn: no ClusterFuzzLite integration found: Follow the steps in https://github.com/google/clusterfuzzlite to integrate fuzzing as part of CI. Over time, try to add fuzzing for more functionalities of your project. (High effort)
- Warn: no HaskellPropertyBasedTesting integration found: Use one of the following frameworks to fuzz your project: QuickCheck: https://hackage.haskell.org/package/QuickCheck hedgehog: https://hedgehog.qa/ validity: https://github.com/NorfairKing/validity smallcheck: https://hackage.haskell.org/package/smallcheck hspec: https://hspec.github.io/ tasty: https://hackage.haskell.org/package/tasty (High effort)
- Warn: no TypeScriptPropertyBasedTesting integration found: Use fast-check: https://github.com/dubzzz/fast-check (High effort)
- Warn: no JavaScriptPropertyBasedTesting integration found: Use fast-check: https://github.com/dubzzz/fast-check (High effort)
Score
8.1
/10
Last Scanned on 2025-07-08T07:41:23Z
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More