Gathering detailed insights and metrics for @cedelabs/ccxt
Gathering detailed insights and metrics for @cedelabs/ccxt
A JavaScript / TypeScript / Python / C# / PHP / Go cryptocurrency trading API with support for more than 100 bitcoin/altcoin exchanges
Installations
npm install @cedelabs/ccxtDeveloper Guide
BETA
Typescript
Yes
Module System
ESM
Min. Node Version
>=15.0.0
Node Version
18.10.0
NPM Version
8.19.2
Releases
167
Languages
14
Python
C#
Go
TypeScript
JavaScript
PHP
C
Shell
Cython
C++
Dockerfile
HTML
Handlebars
Batchfile
Python (22.51%)
C# (20.67%)
Go (18.16%)
TypeScript (14.03%)
JavaScript (13.19%)
PHP (11.34%)
C (0.03%)
Shell (0.02%)
Cython (0.02%)
C++ (0.01%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
37,219 Stars
89,484 Commits
8,040 Forks
938 Watchers
8 Branches
703 Contributors
Updated on Jul 14, 2025
Maintainers
1
Package Meta Information
Latest Version
4.2.56
Package Id
@cedelabs/ccxt@4.2.56
Unpacked Size
47.76 MB
Size
7.61 MB
File Count
1,227
NPM Version
8.19.2
Node Version
18.10.0
Published on
Apr 30, 2024
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
4
Dev Dependencies
30
@rollup/plugin-commonjs@rollup/plugin-json@rollup/plugin-node-resolve@types/node@typescript-eslint/eslint-plugin@typescript-eslint/parseransicoloras-tableasciichartassertast-transpilerdocsifyeslinteslint-config-airbnb-baseeslint-plugin-importeslint-plugin-jsdocesmifyhttps-proxy-agentjsdoc-to-markdownolologpiscinareplace-in-filerolluprollup-plugin-executeterser-webpack-plugints-loaderts-nodetypescriptwebpackwebpack-cli
README.md
No vulnerabilities found.
Reason
30 commit(s) and 24 issue activity found in the last 90 days -- score normalized to 10
Reason
license file detected
Details
- Info: project has a license file: LICENSE.txt:0
- Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0
Reason
no binaries found in the repo
Reason
dependency not pinned by hash detected -- score normalized to 2
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:94: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:138: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/cs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/go-app.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/go-app.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:159: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:171: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js.yml:125: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/js.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/php.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/php.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/php.yml:157: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/php.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:170: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:182: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:100: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/python.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/python.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-js-only.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release-js-only.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:149: update your workflow using https://app.stepsecurity.io/secureworkflow/ccxt/ccxt/release.yml/master?enable=pin
- Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating ubuntu:20.04 to ubuntu:20.04@sha256:8feb4d8ca5354def3d8fce243717141ce31e2c428701f6682bd2fafe15388214
- Warn: pipCommand not pinned by hash: Dockerfile:27
- Warn: pipCommand not pinned by hash: Dockerfile:28
- Warn: pipCommand not pinned by hash: Dockerfile:29
- Warn: pipCommand not pinned by hash: Dockerfile:30
- Warn: pipCommand not pinned by hash: Dockerfile:31
- Warn: pipCommand not pinned by hash: Dockerfile:32
- Warn: pipCommand not pinned by hash: Dockerfile:33
- Warn: downloadThenRun not pinned by hash: Dockerfile:37-40
- Warn: npmCommand not pinned by hash: Dockerfile:42
- Warn: pipCommand not pinned by hash: Dockerfile:45-47
- Warn: npmCommand not pinned by hash: utils/package-test.sh:7
- Warn: npmCommand not pinned by hash: .github/workflows/go-app.yml:37
- Warn: pipCommand not pinned by hash: .github/workflows/python.yml:40
- Warn: pipCommand not pinned by hash: .github/workflows/python.yml:188
- Warn: pipCommand not pinned by hash: .github/workflows/release.yml:63
- Warn: pipCommand not pinned by hash: .github/workflows/release.yml:65
- Info: 0 out of 62 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 6 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 containerImage dependencies pinned
- Info: 0 out of 12 pipCommand dependencies pinned
- Info: 0 out of 1 downloadThenRun dependencies pinned
- Info: 12 out of 15 npmCommand dependencies pinned
Reason
Found 4/30 approved changesets -- score normalized to 1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dangerous workflow patterns detected
Details
- Warn: script injection with untrusted input ' github.event.head_commit.message ': .github/workflows/cs.yml:29
- Warn: script injection with untrusted input ' github.event.head_commit.message ': .github/workflows/js.yml:19
- Warn: script injection with untrusted input ' github.event.head_commit.message ': .github/workflows/js.yml:42
- Warn: script injection with untrusted input ' github.event.head_commit.message ': .github/workflows/js.yml:146
- Warn: script injection with untrusted input ' github.event.head_commit.message ': .github/workflows/php.yml:35
- Warn: script injection with untrusted input ' github.event.head_commit.message ': .github/workflows/python.yml:29
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Info: topLevel 'contents' permission set to 'read': .github/workflows/cs.yml:11
- Warn: no topLevel permission defined: .github/workflows/go-app.yml:1
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/js.yml:11
- Info: topLevel 'contents' permission set to 'read': .github/workflows/php.yml:11
- Info: topLevel 'contents' permission set to 'read': .github/workflows/python.yml:11
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/release-js-only.yml:12
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yml:12
- Info: no jobLevel write permissions found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 5 are checked with a SAST tool
Reason
29 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: PYSEC-2022-42986 / GHSA-43fp-rhv2-5gv8
- Warn: Project is vulnerable to: PYSEC-2023-135 / GHSA-xqr8-7jwr-rhp7
- Warn: Project is vulnerable to: GHSA-3ww4-gg4f-jr7f
- Warn: Project is vulnerable to: GHSA-5cpq-8wj7-hf2v
- Warn: Project is vulnerable to: GHSA-9v9h-cgj8-h64p
- Warn: Project is vulnerable to: PYSEC-2021-62 / GHSA-hggm-jpg3-v476
- Warn: Project is vulnerable to: GHSA-jm77-qphf-c4w8
- Warn: Project is vulnerable to: GHSA-v8gr-m533-ghj9
- Warn: Project is vulnerable to: GHSA-w7pp-m8wf-vj6r
- Warn: Project is vulnerable to: GHSA-x4qr-2fvf-3mr5
- Warn: Project is vulnerable to: PYSEC-2019-41 / GHSA-qfc5-mcwq-26q8
- Warn: Project is vulnerable to: PYSEC-2018-24 / GHSA-2rcm-phc9-3945
- Warn: Project is vulnerable to: PYSEC-2013-31 / GHSA-6748-36qp-fx6r
- Warn: Project is vulnerable to: PYSEC-2018-23 / GHSA-p28m-34f6-967q
- Warn: Project is vulnerable to: GHSA-9hjg-9r4m-mvj7
- Warn: Project is vulnerable to: GHSA-9wx4-h78v-vm56
- Warn: Project is vulnerable to: PYSEC-2023-74 / GHSA-j8r2-6x86-q33q
- Warn: Project is vulnerable to: PYSEC-2018-28 / GHSA-x84v-xcm2-53pg
- Warn: Project is vulnerable to: PYSEC-2025-49 / GHSA-5rjg-fvgr-3xxf
- Warn: Project is vulnerable to: GHSA-cx63-2mw6-8hw5
- Warn: Project is vulnerable to: PYSEC-2022-43012 / GHSA-r9hx-vwmv-q579
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
2.7
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More