npmpackage.info

Gathering detailed insights and metrics for @charlietango/use-script

@charlietango/use-script

Collection of React Hooks used by Charlie Tango

2.3.0

MIT

TypeScript

660.00 B

1,069,888 4.3

Installations

npm install @charlietango/use-script

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

17.5.0

NPM Version

lerna/4.0.0/node@v17.5.0+x64 (darwin)

Score

70.9

Supply Chain

74.4

Quality

77.4

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

84

Closed

47

Merged

37

Issues

Open

0

Total

27

Closed

27

Releases

v2.2.1

Published on 04 Dec 2024

v2.2.0

Published on 04 Dec 2024

v2.1.3

Published on 13 Aug 2024

v2.1.2

Published on 13 Aug 2024

v2.1.1

Published on 13 Aug 2024

v2.1.0

Published on 06 Aug 2024

View all 10 releases

Contributors

Unable to fetch Contributors

View all 7 contributors

Languages

TypeScript

JavaScript

TypeScript (97.35%)

JavaScript (2.65%)

Love this project? Help keep it running — sponsor us today! 🚀

Developer

charlie-tango

Download Statistics

Total Downloads

1,069,888

Last Day

Last Week

Last Month

7,572

Last Year

180,843

GitHub Statistics

76 Stars

204 Commits

10 Forks

5 Watching

2 Branches

7 Contributors

Bundle Size

1.42 kB

Minified

660.00 B

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

2.3.0

Package Id

@charlietango/use-script@2.3.0

Unpacked Size

9.46 kB

Size

3.01 kB

File Count

NPM Version

lerna/4.0.0/node@v17.5.0+x64 (darwin)

Node Version

17.5.0

Total Downloads

Cumulative downloads

Total Downloads

1,069,888

Last day

Compared to previous day

Last week

-99.2%

Compared to previous week

Last month

-9.2%

7,572

Compared to previous month

Last year

-29.6%

180,843

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@charlietango/use-client-hydrated

Peer Dependencies

react react-dom

Versions

useScript

With useScript you can lazy-load external third party scripts, that your components might depend on. It checks if the requested url already exists and reuses it, instead of creating a new load request.

Checkout the Storybook demo.

Installation

1yarn add @charlietango/use-script

API

1const [ready, status] = useScript(url)

The hook returns an array, where the first value is a boolean indicating if the script is ready. The second value is the current loading status, that will be one of the ScriptStatus enum values:

1enum ScriptStatus {
2  IDLE = 'idle',
3  LOADING = 'loading',
4  READY = 'loaded',
5  ERROR = 'error',
6}

Example

1import React from 'react'
2import useScript, { ScriptStatus } from '@charlietango/use-script'
3
4const Component = () => {
5  const [ready, status] = useScript('https://api.google.com/api.js')
6
7  if (status === ScriptStatus.ERROR) {
8    return <div>Failed to load Google API</div>
9  }
10
11  return <div>Google API Ready: {ready}</div>
12}
13
14export default Component

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

6

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

3

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg-pr.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/pkg-pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg-pr.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/pkg-pr.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-limit.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/size-limit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-limit.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/size-limit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-limit.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/charlie-tango/hooks/size-limit.yml/main?enable=pin
Info: 0 out of 10 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

4.3

/10

Last Scanned on 2025-02-03

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More