Gathering detailed insights and metrics for @casual-simulation/stacktrace
Installations
npm install @casual-simulation/stacktraceDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Node Version
16.18.1
NPM Version
lerna/5.1.8/node@v16.18.1+x64 (linux)
Score
73.7
Supply Chain
71.8
Quality
78.4
Maintenance
100
Vulnerability
99.6
License
Releases
331
Contributors
13
Unable to fetch Contributors
Languages
9
TypeScript
JavaScript
TeX
Vue
CSS
HTML
Shell
SCSS
Dockerfile
TypeScript (62.14%)
JavaScript (28.65%)
TeX (7.56%)
Vue (1.19%)
CSS (0.27%)
HTML (0.1%)
Shell (0.04%)
SCSS (0.02%)
Dockerfile (0.01%)
Developer
Download Statistics
Total Downloads
23,158
Last Day
7
Last Week
20
Last Month
68
Last Year
7,397
GitHub Statistics
50 Stars
13,502 Commits
9 Forks
8 Watching
243 Branches
13 Contributors
Bundle Size
2.61 kB
Minified
1.16 kB
Minified + Gzipped
Maintainers
2
Package Meta Information
Latest Version
3.1.14-alpha.3661157217
Package Id
@casual-simulation/stacktrace@3.1.14-alpha.3661157217
Unpacked Size
53.02 kB
Size
11.77 kB
File Count
12
NPM Version
lerna/5.1.8/node@v16.18.1+x64 (linux)
Node Version
16.18.1
Total Downloads
Cumulative downloads
Total Downloads
23,158
Last day
250%
7
Compared to previous day
Last week
300%
20
Compared to previous week
Last month
-67.9%
68
Compared to previous month
Last year
6.9%
7,397
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
No dependencies detected.
Versions
Stacktrace
A library to help with parsing stack traces from browser/node exceptions.
Forked from Sentry.io's tracekit.ts which in turn was forked from the Tracekit repository.
Why did we fork it? Well, we wanted a well-tested cross-browser stacktrace parser and figured that the Sentry.io parser was our best candidate. We forked it since there wasn't a package for it. An alternative would be to use the error-stack-parser package but there seem to be a couple issues around supporting anonymous functions and such.
Installation
npm install @casual-simulation/stacktrace
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Reason
license file detected
Details
- Info: project has a license file: LICENSE.txt:0
- Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0
Reason
packaging workflow detected
Details
- Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:11
Reason
project is fuzzed
Details
- Info: TypeScriptPropertyBasedTesting integration found: src/expect/src/__tests__/__arbitraries__/sharedSettings.ts:9
- Info: TypeScriptPropertyBasedTesting integration found: src/expect/src/__tests__/matchers-toContain.property.test.ts:9
- Info: TypeScriptPropertyBasedTesting integration found: src/expect/src/__tests__/matchers-toContainEqual.property.test.ts:9
- Info: TypeScriptPropertyBasedTesting integration found: src/expect/src/__tests__/matchers-toEqual.property.test.ts:9
- Info: TypeScriptPropertyBasedTesting integration found: src/expect/src/__tests__/matchers-toStrictEqual.property.test.ts:10
- Info: TypeScriptPropertyBasedTesting integration found: src/expect/src/diff-sequences/__tests__/index.property.test.ts:9
Reason
binaries present in source code
Details
- Warn: binary detected: src/aux-server/aux-web/shared/static/gltf-draco/draco_decoder.wasm:1
Reason
Found 3/18 approved changesets -- score normalized to 1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/continuous-integration-workflow.yml:1
- Warn: no topLevel permission defined: .github/workflows/copy-ab1-files.yml:1
- Warn: no topLevel permission defined: .github/workflows/deploy.yml:1
- Warn: no topLevel permission defined: .github/workflows/release.yml:1
- Info: no jobLevel write permissions found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 16 are checked with a SAST tool
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration-workflow.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/continuous-integration-workflow.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration-workflow.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/continuous-integration-workflow.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration-workflow.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/continuous-integration-workflow.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration-workflow.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/continuous-integration-workflow.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration-workflow.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/continuous-integration-workflow.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/continuous-integration-workflow.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/continuous-integration-workflow.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/copy-ab1-files.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/copy-ab1-files.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/copy-ab1-files.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/copy-ab1-files.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/deploy.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/deploy.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/release.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/release.yml/develop?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/release.yml/develop?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/release.yml/develop?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:199: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/release.yml/develop?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:205: update your workflow using https://app.stepsecurity.io/secureworkflow/casual-simulation/casualos/release.yml/develop?enable=pin
- Warn: containerImage not pinned by hash: .aws/docker/Dockerfile:1: pin your Docker image by updating ubuntu:latest to ubuntu:latest@sha256:72297848456d5d37d1262630108ab308d3e9ec7ed1c3286a32fe09856619a782
- Warn: containerImage not pinned by hash: .gitpod.Dockerfile:1: pin your Docker image by updating gitpod/workspace-full to gitpod/workspace-full@sha256:bec45ebdcc9b9c5ec28d5c61c16bf599200aa0d2dc1e69e2ed8ab0a424bae6db
- Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating node:18 to node:18@sha256:ea6f26e394c48aa55a690d1fd40bed94ef332e19fe48d66e556f7247b3aeb65a
- Warn: containerImage not pinned by hash: Dockerfile.arm32:1: pin your Docker image by updating arm32v7/node:18 to arm32v7/node:18@sha256:c2cbc7e7c29a8c37bcb3d8690b0fcabcfb17d851e03fcc499df200c2424c3789
- Warn: containerImage not pinned by hash: Dockerfile.arm64:1: pin your Docker image by updating arm64v8/node:18 to arm64v8/node:18@sha256:7cbf90546a9fc9bf7fd437377d6fb02dd8f78fc819b92dd655c4898f6e4f5fa1
- Warn: containerImage not pinned by hash: src/aux-proxy/Dockerfile:1: pin your Docker image by updating node:11 to node:11@sha256:67ca28addce8ae818b144114a9376a6603aba09069b7313618d37b38584abba1
- Warn: containerImage not pinned by hash: src/aux-redirector/Dockerfile:1: pin your Docker image by updating node:11 to node:11@sha256:67ca28addce8ae818b144114a9376a6603aba09069b7313618d37b38584abba1
- Warn: downloadThenRun not pinned by hash: .aws/docker/Dockerfile:52
- Warn: npmCommand not pinned by hash: .gitpod.Dockerfile:16
- Warn: downloadThenRun not pinned by hash: Dockerfile:15
- Warn: npmCommand not pinned by hash: Dockerfile:17
- Warn: npmCommand not pinned by hash: Dockerfile:18
- Warn: npmCommand not pinned by hash: Dockerfile.arm64:16
- Warn: npmCommand not pinned by hash: Dockerfile.arm64:17
- Warn: npmCommand not pinned by hash: src/aux-proxy/Dockerfile:7
- Warn: npmCommand not pinned by hash: src/aux-redirector/Dockerfile:7
- Warn: downloadThenRun not pinned by hash: .aws/ami/install-nodejs.sh:6
- Warn: npmCommand not pinned by hash: .aws/ami/install-nodejs.sh:17
- Warn: pipCommand not pinned by hash: install.sh:121
- Warn: pipCommand not pinned by hash: install.sh:177
- Warn: npmCommand not pinned by hash: .github/workflows/release.yml:61
- Warn: npmCommand not pinned by hash: .github/workflows/release.yml:79
- Info: 0 out of 12 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 4 third-party GitHubAction dependencies pinned
- Info: 0 out of 2 pipCommand dependencies pinned
- Info: 0 out of 7 containerImage dependencies pinned
- Info: 0 out of 3 downloadThenRun dependencies pinned
- Info: 0 out of 10 npmCommand dependencies pinned
Reason
29 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-36jr-mh4h-2g58
- Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
- Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-vxvm-qww3-2fh7
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-566m-qj78-rww5
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-5j4c-8p2g-v4jx
- Warn: Project is vulnerable to: GHSA-g3ch-rx76-35fx
Score
4.8
/10
Last Scanned on 2025-02-03
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More