Gathering detailed insights and metrics for @asyncapi/ts-nats-template
Gathering detailed insights and metrics for @asyncapi/ts-nats-template
Node.js/Typescript template for NATS
Installations
npm install @asyncapi/ts-nats-templateDeveloper Guide
BETA
Typescript
No
Module System
N/A
Node Version
14.21.3
NPM Version
7.24.2
Releases
149
Languages
2
JavaScript
TypeScript
JavaScript (98.27%)
TypeScript (1.73%)
Developer
asyncapi
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
Apache-2.0 License
20 Stars
496 Commits
13 Forks
4 Watchers
81 Branches
9 Contributors
Updated on Mar 20, 2025
Maintainers
3
Package Meta Information
Latest Version
0.10.3
Package Id
@asyncapi/ts-nats-template@0.10.3
Unpacked Size
1.43 MB
Size
334.91 kB
File Count
160
NPM Version
7.24.2
Node Version
14.21.3
Published on
Aug 11, 2023
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
9
Dev Dependencies
18
@asyncapi/generator@semantic-release/commit-analyzer@semantic-release/github@semantic-release/npm@semantic-release/release-notes-generator@types/jestconventional-changelog-conventionalcommitseslinteslint-plugin-mochaeslint-plugin-reacteslint-plugin-securityeslint-plugin-sonarjsjestrimrafsemantic-releasets-jestts-nodetypescript
TypeScript/Node.js NATS template
This is a TypeScript/Node.js NATS template for the AsyncAPI generator.
This template is for generating a TypeScript/Node.js wrapper for the NATS client based on your AsyncAPI document. The template is based on the nats.js library and can be used as both a TypeScript and Node.js library.
Have you found a bug or have an idea for improvement? Feel free to contribute! See the contribution guidelines for how to do so.
How to use
Example use-cases can be found under examples.
Information about the generated files and a description can be found under the documentation folder.
Requirements
- @asyncapi/generator < v2.0.0 >v1.1.1
Install the generator through npm or run it from docker official installer.
Template Parameters
These are the available template parameters:
| Parameter | Type | Description |
|---|---|---|
| generateTestClient | Boolean | Use this parameter to generate the test client. Add the following to the CLI when generating your code --param "generateTestClient=true" |
| promisifyReplyCallback | Boolean | Use this parameter to change from the default regular callback when using the request operation. Add the following to the CLI when generating your code --param "promisifyReplyCallback=true" |
Features
- Supports wildcard channels. AsyncAPI describes the channel path to be defined as RFC 6570 URI. So a channel containing a wildcard needs to be defined with parameters such as
smartylighting/streetlights/{wildcard}. - Supports test/mirror client for testing or other useful scenarios.
- This template can be used as a NodeJS library.
- Generates payload models using the AsyncAPI model generation library.
Restrictions
- Empty objects are not supported, use
nulltypes instead.
Contributing
Before contributing, please read the CONTRIBUTING document.
Contributors ✨
Thanks goes to these wonderful people (emoji key):
 Jonas Lagoni 🐛 🚧 💻 📖 🤔 💬 ⚠️ |  Maciej Urbańczyk 👀 |  Lukasz Gornicki 🚇 👀 |  Fran Méndez 👀 |  Colin Sullivan 👀 |  Alberto Ricart 👀 |  Alejandra Quetzalli 👀 |
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
all changesets reviewed
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0
Reason
dependency not pinned by hash detected -- score normalized to 1
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/add-good-first-issue-labels.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/add-good-first-issue-labels.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automerge-for-humans-add-ready-to-merge-or-do-not-merge-label.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/automerge-for-humans-add-ready-to-merge-or-do-not-merge-label.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automerge-for-humans-add-ready-to-merge-or-do-not-merge-label.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/automerge-for-humans-add-ready-to-merge-or-do-not-merge-label.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automerge-for-humans-add-ready-to-merge-or-do-not-merge-label.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/automerge-for-humans-add-ready-to-merge-or-do-not-merge-label.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/automerge-for-humans-merging.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/automerge-for-humans-merging.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automerge-for-humans-remove-ready-to-merge-label-on-edit.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/automerge-for-humans-remove-ready-to-merge-label-on-edit.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automerge-orphans.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/automerge-orphans.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automerge-orphans.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/automerge-orphans.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/automerge-orphans.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/automerge-orphans.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/automerge-orphans.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/automerge-orphans.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/automerge.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/automerge.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/autoupdate.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/autoupdate.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bounty-program-commands.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/bounty-program-commands.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bounty-program-commands.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/bounty-program-commands.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bounty-program-commands.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/bounty-program-commands.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bump.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/bump.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/bump.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/bump.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/help-command.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/help-command.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/help-command.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/help-command.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/if-nodejs-pr-testing.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-pr-testing.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/if-nodejs-pr-testing.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-pr-testing.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/if-nodejs-pr-testing.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-pr-testing.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/if-nodejs-release.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/if-nodejs-release.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/if-nodejs-release.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/if-nodejs-release.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/if-nodejs-release.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/if-nodejs-release.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/if-nodejs-version-bump.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-version-bump.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/if-nodejs-version-bump.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-version-bump.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/if-nodejs-version-bump.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-version-bump.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/if-nodejs-version-bump.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/if-nodejs-version-bump.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issues-prs-notifications.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/issues-prs-notifications.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issues-prs-notifications.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/issues-prs-notifications.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issues-prs-notifications.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/issues-prs-notifications.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issues-prs-notifications.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/issues-prs-notifications.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issues-prs-notifications.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/issues-prs-notifications.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issues-prs-notifications.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/issues-prs-notifications.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:109: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:172: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:181: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:186: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:217: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:226: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:231: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:244: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:262: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:271: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:276: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:289: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/notify-tsc-members-mention.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/please-take-a-look-command.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/please-take-a-look-command.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request-example-testing.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/pull-request-example-testing.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request-example-testing.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/pull-request-example-testing.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pull-request-example-testing.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/pull-request-example-testing.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-announcements.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/release-announcements.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-announcements.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/release-announcements.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-announcements.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/release-announcements.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-announcements.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/release-announcements.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-announcements.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/release-announcements.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-pr.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/update-pr.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-pr.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/update-pr.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/welcome-first-time-contrib.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/asyncapi-archived-repos/ts-nats-template/welcome-first-time-contrib.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/if-nodejs-pr-testing.yml:67
- Warn: npmCommand not pinned by hash: .github/workflows/if-nodejs-release.yml:92
- Warn: npmCommand not pinned by hash: .github/workflows/if-nodejs-release.yml:57
- Warn: npmCommand not pinned by hash: .github/workflows/if-nodejs-version-bump.yml:37
- Warn: npmCommand not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:242
- Warn: npmCommand not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:287
- Warn: npmCommand not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:62
- Warn: npmCommand not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:107
- Warn: npmCommand not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:152
- Warn: npmCommand not pinned by hash: .github/workflows/notify-tsc-members-mention.yml:197
- Info: 1 out of 50 GitHub-owned GitHubAction dependencies pinned
- Info: 7 out of 38 third-party GitHubAction dependencies pinned
- Info: 2 out of 12 npmCommand dependencies pinned
Reason
project is archived
Details
- Warn: Repository is archived.
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/add-good-first-issue-labels.yml:1
- Warn: no topLevel permission defined: .github/workflows/automerge-for-humans-add-ready-to-merge-or-do-not-merge-label.yml:1
- Warn: no topLevel permission defined: .github/workflows/automerge-for-humans-merging.yml:1
- Warn: no topLevel permission defined: .github/workflows/automerge-for-humans-remove-ready-to-merge-label-on-edit.yml:1
- Warn: no topLevel permission defined: .github/workflows/automerge-orphans.yml:1
- Warn: no topLevel permission defined: .github/workflows/automerge.yml:1
- Warn: no topLevel permission defined: .github/workflows/autoupdate.yml:1
- Warn: no topLevel permission defined: .github/workflows/bounty-program-commands.yml:1
- Warn: no topLevel permission defined: .github/workflows/bump.yml:1
- Warn: no topLevel permission defined: .github/workflows/help-command.yml:1
- Warn: no topLevel permission defined: .github/workflows/if-nodejs-pr-testing.yml:1
- Warn: no topLevel permission defined: .github/workflows/if-nodejs-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/if-nodejs-version-bump.yml:1
- Warn: no topLevel permission defined: .github/workflows/issues-prs-notifications.yml:1
- Warn: no topLevel permission defined: .github/workflows/lint-pr-title.yml:1
- Warn: no topLevel permission defined: .github/workflows/notify-tsc-members-mention.yml:1
- Warn: no topLevel permission defined: .github/workflows/please-take-a-look-command.yml:1
- Warn: no topLevel permission defined: .github/workflows/pull-request-example-testing.yml:1
- Warn: no topLevel permission defined: .github/workflows/release-announcements.yml:1
- Warn: no topLevel permission defined: .github/workflows/stale-issues-prs.yml:1
- Warn: no topLevel permission defined: .github/workflows/update-pr.yml:1
- Warn: no topLevel permission defined: .github/workflows/welcome-first-time-contrib.yml:1
- Info: no jobLevel write permissions found
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
36 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42
- Warn: Project is vulnerable to: GHSA-h452-7996-h45h
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-4q6p-r6v2-jvc5
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
- Warn: Project is vulnerable to: GHSA-mxhp-79qh-mcx6
- Warn: Project is vulnerable to: GHSA-6vfc-qv3f-vr6c
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-qrpm-p2h7-hrv2
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
- Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
- Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
- Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
- Warn: Project is vulnerable to: GHSA-pppg-cpfq-h7wr
- Warn: Project is vulnerable to: GHSA-hw8r-x6gr-5gjp
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-hj9c-8jmm-8c52
- Warn: Project is vulnerable to: GHSA-x77j-w7wf-fjmw
- Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Score
3.9
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More