npmpackage.info

@azure/keyvault-secrets

This repository is for active development of the Azure SDK for JavaScript (NodeJS & Browser). For consumers of the SDK we recommend visiting our public developer docs at https://docs.microsoft.com/javascript/azure/ or our versioned developer docs at https://azure.github.io/azure-sdk-for-js.

4.9.0

2,095

MIT

TypeScript

30,046,836 7.2

Installations

npm install @azure/keyvault-secrets

Pull Requests

Open

132

Total

23,029

Closed

6,905

Merged

15,992

Issues

Open

708

Total

8,909

Closed

8,201

Releases

3,437

@azure/core-rest-pipeline_1.18.1

Published on 26 Nov 2024

@azure/arm-networkcloud_2.0.0-beta.1

Published on 26 Nov 2024

@azure/arm-apimanagement_9.2.0

Published on 26 Nov 2024

@azure/template_1.0.13-beta.4363791

Published on 26 Nov 2024

@azure/template_1.0.13-beta.4363714

Published on 26 Nov 2024

@azure/template_1.0.13-beta.4363677

Published on 25 Nov 2024

View all 3,437 releases

Developer

Azure

Developer Guide

BETA

Module System

ESM, UMD

Min. Node Version

>=18.0.0

Typescript Support

Yes

Node Version

18.5.0

NPM Version

Statistics

2,095 Stars

17,466 Commits

1,209 Forks

357 Watching

459 Branches

2,703 Contributors

Updated on 28 Nov 2024

Languages

TypeScript (86.72%)

JavaScript (12.89%)

PowerShell (0.32%)

Bicep (0.05%)

HTML (0.01%)

Mustache (0.01%)

Total Downloads

Cumulative downloads

Total Downloads

30,046,836

Last day

0.4%

59,721

Compared to previous day

Last week

0.8%

322,323

Compared to previous week

Last month

9.1%

1,355,035

Compared to previous month

Last year

58%

12,663,252

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Versions

Azure SDK for JavaScript

This repository is for the Azure SDK for JavaScript (Node.js & Browser). It contains libraries for the breadth of Azure services. Management libraries are packages that you would use to provision and manage Azure resources. Client libraries are packages that you would use to consume these resources and interact with them.

Getting started

A few helpful resources to get started are:

The readme for each package contains code samples and package information. This readme can be found in the corresponding package folder under the folder of the service of your choice in the /sdk folder of this repository. The same readme file can be found on the landing page for the package in npm.
The API reference documentation of the latest versions of these packages, can be found at our public developer docs.
The API reference documentation of older versions, can be found in our versioned developer docs.

Each service might have a number of libraries available from each of the following categories:

Client
Management

NOTE: Some of these packages have beta versions. If you need to ensure your code is ready for production, use one of the stable, non-beta packages.

Client

Given an Azure resource already exists, you would use the client libraries to consume it and interact with it. Most of these libraries follow the Azure SDK Design Guidelines for JavaScript & TypeScript and share a number of core functionalities such as retries, logging, transport protocols, authentication protocols, etc. Others will be updated in the near future to follow the guidelines as well.

To get a list of all client libraries that follow the new guidelines, please visit our Azure SDK releases page.

Management

Management libraries enable you to provision and manage Azure resources via the Azure Resource Manager i.e. ARM. You can recognize these libraries by @azure/arm- in their package names. These are purely auto-generated based on the swagger files that represent the APIs for resource management.

Newer versions of these libraries follow the Azure SDK Design Guidelines for TypeScript. These new versions provide a number of core capabilities that are shared amongst all Azure SDKs, including the intuitive Azure Identity library, an HTTP Pipeline with custom policies, error-handling, distributed tracing, and much more. A few helpful resources to get started with these are:

List of management libraries that follow the new guidelines
Documentation and code samples.
Migration guide that shows how to transition from older versions of libraries.

NOTE: If you are experiencing authentication issues with the management libraries after upgrading certain packages, it's possible that you upgraded to the new versions of SDK without changing the authentication code, please refer to the migration guide mentioned above for proper instructions.

Need help?

For detailed documentation, visit our Azure SDK for JavaScript documentation
File an issue via GitHub Issues
Check previous questions or ask new ones on StackOverflow using azure-sdk-js tag.
Read our Support documentation.

Community

Try our community resources.

Reporting security issues and security bugs

Security issues and bugs should be reported privately, via email, to the Microsoft Security Response Center (MSRC) secure@microsoft.com. You should receive a response within 24 hours. If for some reason you do not, please follow up via email to ensure we received your original message. Further information, including the MSRC PGP key, can be found in the Security TechCenter.

Contributing

For details on contributing to this repository, see the contributing guide.

This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.microsoft.com.

When you submit a pull request, a CLA-bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., label, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repositories using our CLA.

This project has adopted the Microsoft Open Source Code of Conduct. For more information, see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.

Impressions

No vulnerabilities found.

10

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

10

Maintained

Determines if the project is "actively maintained".

10

License

Determines if the project has defined a license.

10

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

10

Security-Policy

Determines if the project has published a security policy.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

9

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

4

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

SAST

Determines if the project uses static code analysis.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/event-processor.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/Azure/azure-sdk-for-js/event-processor.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/event-processor.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/Azure/azure-sdk-for-js/event-processor.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/event-processor.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/Azure/azure-sdk-for-js/event-processor.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/event.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/Azure/azure-sdk-for-js/event.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scheduled-event-processor.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/Azure/azure-sdk-for-js/scheduled-event-processor.yml/main?enable=pin
Warn: containerImage not pinned by hash: sdk/eventhub/event-hubs/test/stress/Dockerfile:4
Warn: containerImage not pinned by hash: sdk/identity/identity/integration/AzureKubernetes/Dockerfile:12
Warn: containerImage not pinned by hash: sdk/identity/identity/test/manual-integration/Kubernetes/Dockerfile:12
Warn: containerImage not pinned by hash: sdk/servicebus/service-bus/test/stress/Dockerfile:4
Warn: npmCommand not pinned by hash: sdk/eventhub/event-hubs/test/stress/Dockerfile:10
Warn: npmCommand not pinned by hash: sdk/identity/identity/integration/AzureKubernetes/Dockerfile:18
Warn: npmCommand not pinned by hash: sdk/identity/identity/test/manual-integration/Kubernetes/Dockerfile:17
Warn: npmCommand not pinned by hash: sdk/identity/identity/test/manual-integration/Kubernetes/Dockerfile:18
Warn: npmCommand not pinned by hash: sdk/servicebus/service-bus/test/stress/Dockerfile:10
Warn: npmCommand not pinned by hash: .devcontainer/init.sh:11
Warn: npmCommand not pinned by hash: .scripts/automation_init.sh:2
Warn: npmCommand not pinned by hash: .scripts/automation_init.sh:3
Warn: npmCommand not pinned by hash: .scripts/automation_init.sh:4
Info: 0 out of 3 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 2 third-party GitHubAction dependencies pinned
Info: 0 out of 4 containerImage dependencies pinned
Info: 0 out of 9 npmCommand dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

Score

7.2

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to @azure/keyvault-secrets

@achs/azure-key-vault

4.4.3

Wrapper for @azure/keyvault-secrets for ease secrets handler in JSON files.

@azure/keyvault-common

2.0.0

Common internal functionality for all of the Azure Key Vault clients in the Azure SDK for JavaScript

@calvear/azure-key-vault

4.1.0

Wrapper for @azure/keyvault-secrets for ease secrets handler in JSON files.

@azure/keyvault-keys

4.9.0

Isomorphic client library for Azure KeyVault's keys.

@azure/keyvault-secrets

Installations

Pull Requests

132

23,029

6,905

15,992

Issues

708

8,909

8,201

Releases

Developer

Azure

Developer Guide

ESM, UMD

>=18.0.0

Yes

18.5.0

Statistics

Languages

Total Downloads

30,046,836

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

Azure SDK for JavaScript

Getting started

Client

Management

Need help?

Community

Reporting security issues and security bugs

Contributing

10

10

10

10

10

10

10

9

4

0

0

0

0

7.2

/10

Other packages similar to @azure/keyvault-secrets