Gathering detailed insights and metrics for @andsafe/foundation-sites
Gathering detailed insights and metrics for @andsafe/foundation-sites
The most advanced responsive front-end framework in the world. Quickly create prototypes and production code for sites that work on any kind of device.
Installations
npm install @andsafe/foundation-sitesDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Min. Node Version
>=12.0
Node Version
20.5.0
NPM Version
9.8.0
Releases
79
Languages
4
HTML
SCSS
JavaScript
Shell
HTML (56.33%)
SCSS (28.98%)
JavaScript (14.68%)
Shell (0.02%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
29,758 Stars
17,309 Commits
5,453 Forks
1,229 Watchers
27 Branches
1,030 Contributors
Updated on Jul 15, 2025
Maintainers
1
Package Meta Information
Latest Version
6.7.5-custom
Package Id
@andsafe/foundation-sites@6.7.5-custom
Unpacked Size
24.08 MB
Size
10.73 MB
File Count
771
NPM Version
9.8.0
Node Version
20.5.0
Published on
Aug 16, 2023
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Peer Dependencies
3
Dev Dependencies
69
@babel/core@babel/preset-env@commitlint/cli@commitlint/config-conventionalautoprefixerbabel-loaderbrowser-syncbrowserstack-runnerchaichai-jqueryclipboardcorejs-typeaheadcz-conventional-changelogdoiusefoundation-docsgulpgulp-add-srcgulp-babelgulp-cache-bustgulp-check-depsgulp-clean-cssgulp-concatgulp-eslintgulp-filtergulp-ifgulp-load-pluginsgulp-newergulp-plumbergulp-postcssgulp-renamegulp-replacegulp-sassgulp-sass-lintgulp-sourcemapsgulp-uglifygulp-ziphuskyis-empty-objectjqueryjs-yamlkleurmochamocha-headless-chromemotion-uinode-sassoctophantpaninipatch-packageprettyjsonpuppeteerrequire-dirrequirejsrolluprollup-plugin-babelrun-sequencesass-truesassy-listssinonstrip-indentsupercollidertouchundertaker-forward-referenceutil-deprecatevinylvinyl-namedwebpackwebpack-streamwhat-inputyargs
Install | Documentation | Releases | Contributing
Foundation is the most advanced responsive front-end framework in the world. Quickly go from prototype to production, building sites or apps that work on any kind of device with Foundation. Includes a fully customizable, responsive grid, a large library of Sass mixins, commonly used JavaScript plugins, and full accessibility support.
Run locally
Documentation
To run the documentation locally on your machine, you need Node.js installed on your computer. (Your Node.js version must be 12 or 14). Run these commands to set up the documentation:
1# Install 2git clone https://github.com/foundation/foundation-sites 3cd foundation-sites 4yarn 5 6# Start the documentation 7yarn start
Testing
Foundation has three kinds of tests: JavaScript, Sass, and visual regression. Refer to our testing guide for more details.
Run tests with:
1# Sass unit tests 2yarn test:sass 3# JavaScript unit tests 4yarn test:javascript:units 5# Visual tests 6yarn test:visual
Contributing
Check out CONTRIBUTING.md to see how to report an issue or submit a bug fix or a new feature, and our contributing guide to learn how you can contribute more globally to Foundation. You can also browse the Help Wanted tag in our issue tracker to find things to do.
Testing powered by
BrowserStack Open-Source Program
Copyright © 2020 Foundation Community
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Warn: no linked content found
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
Found 6/27 approved changesets -- score normalized to 2
Reason
SAST tool is not run on all commits -- score normalized to 2
Details
- Warn: 2 commits out of 9 are checked with a SAST tool
Reason
0 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/main.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/foundation/foundation-sites/main.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/foundation/foundation-sites/main.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/foundation/foundation-sites/main.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/foundation/foundation-sites/main.yml/develop?enable=pin
- Info: 0 out of 4 GitHub-owned GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
33 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-r7jx-5m6m-cpg9
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-vfrc-7r7c-w9mx
- Warn: Project is vulnerable to: GHSA-7wwv-vh3v-89cq
- Warn: Project is vulnerable to: GHSA-pfq8-rq6v-vf5m
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-ch52-vgq2-943f
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
- Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-mxhp-79qh-mcx6
- Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx
- Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975
- Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Score
3.4
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More