npmpackage.info

Gathering detailed insights and metrics for @charlietango/use-script

@charlietango/use-script - 2.3.0 | npmpackage.info

@charlietango/use-script

Collection of React Hooks used by Charlie Tango

2.3.0

MIT

TypeScript

660.00 B

1,115,966 3.9

Installations

npm install @charlietango/use-script

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

17.5.0

NPM Version

lerna/4.0.0/node@v17.5.0+x64 (darwin)

Score

72.3

Supply Chain

74.4

Quality

77.4

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

85

Closed

47

Merged

38

Issues

Open

0

Total

27

Closed

27

Releases

v2.3.0

Updated on Apr 28, 2025

v2.2.1

Updated on Dec 04, 2024

v2.2.0

Updated on Dec 04, 2024

v2.1.3

Updated on Aug 13, 2024

v2.1.2

Updated on Aug 13, 2024

v2.1.1

Updated on Aug 13, 2024

View All 11 releases

Languages

TypeScript

JavaScript

TypeScript (97.36%)

JavaScript (2.64%)

Developer

charlie-tango

Download Statistics

Total Downloads

1,115,966

Last Day

Last Week

2,399

Last Month

10,309

Last Year

156,510

GitHub Statistics

MIT License

78 Stars

211 Commits

10 Forks

4 Watchers

3 Branches

7 Contributors

Updated on May 24, 2025

Bundle Size

1.42 kB

Minified

660.00 B

Minified + Gzipped

Bundlephobia

Maintainers

View All 7 Contributors

Package Meta Information

Latest Version

2.3.0

Package Id

@charlietango/use-script@2.3.0

Unpacked Size

9.46 kB

Size

3.01 kB

File Count

NPM Version

lerna/4.0.0/node@v17.5.0+x64 (darwin)

Node Version

17.5.0

Total Downloads

Cumulative downloads

Total Downloads

1,115,966

Last Day

-50%

Compared to previous day

Last Week

14.6%

2,399

Compared to previous week

Last Month

-3%

10,309

Compared to previous month

Last Year

-34%

156,510

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@charlietango/use-client-hydrated

Peer Dependencies

react react-dom

useScript

With useScript you can lazy-load external third party scripts, that your components might depend on. It checks if the requested url already exists and reuses it, instead of creating a new load request.

Checkout the Storybook demo.

Installation

1yarn add @charlietango/use-script

API

1const [ready, status] = useScript(url)

The hook returns an array, where the first value is a boolean indicating if the script is ready. The second value is the current loading status, that will be one of the ScriptStatus enum values:

1enum ScriptStatus {
2  IDLE = 'idle',
3  LOADING = 'loading',
4  READY = 'loaded',
5  ERROR = 'error',
6}

Example

1import React from 'react'
2import useScript, { ScriptStatus } from '@charlietango/use-script'
3
4const Component = () => {
5  const [ready, status] = useScript('https://api.google.com/api.js')
6
7  if (status === ScriptStatus.ERROR) {
8    return <div>Failed to load Google API</div>
9  }
10
11  return <div>Google API Ready: {ready}</div>
12}
13
14export default Component

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

7

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

5

Maintained

Determines if the project is "actively maintained".

3

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg-pr.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/pkg-pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg-pr.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/pkg-pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-limit.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/size-limit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-limit.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/size-limit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-limit.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/size-limit.yml/main?enable=pin
Info: 0 out of 10 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

3.9

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More