npmpackage.info

Gathering detailed insights and metrics for @contentful/f36-card

@contentful/f36-card - 4.79.2 | npmpackage.info

@contentful/f36-card

A design system by Contentful

4.79.2

343

MIT

TypeScript

120.33 kB

5,174,138 5.3

Installations

npm install @contentful/f36-card

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

18.20.6

NPM Version

10.8.2 Score

Supply Chain

49.7

Quality

91.5

Maintenance

100

Vulnerability

99.6

License

Pull Requests

Open

9

Total

2,766

Closed

443

Merged

2,314

Issues

Open

12

Total

247

Closed

235

Releases

8,058

@contentful/f36-components@4.80.1

Updated on May 07, 2025

@contentful/f36-core@4.80.1

Updated on May 07, 2025

@contentful/f36-typography@4.80.1

Updated on May 07, 2025

@contentful/f36-tooltip@4.80.1

Updated on May 07, 2025

@contentful/f36-text-link@4.80.1

Updated on May 07, 2025

@contentful/f36-tabs@4.80.1

Updated on May 07, 2025

View All 8,058 releases

Languages

TypeScript

JavaScript

MDX

CSS

Handlebars

HTML

TypeScript (84.31%)

JavaScript (11.3%)

MDX (3.68%)

CSS (0.56%)

Handlebars (0.15%)

Developer

contentful

Download Statistics

Total Downloads

5,174,138

Last Day

4,555

Last Week

24,305

Last Month

98,093

Last Year

1,308,075

GitHub Statistics

MIT License

343 Stars

3,820 Commits

83 Forks

67 Watchers

40 Branches

300 Contributors

Updated on May 08, 2025

Maintainers

View All 300 Contributors

Package Meta Information

Latest Version

4.79.2

Package Id

@contentful/f36-card@4.79.2

Unpacked Size

120.33 kB

Size

27.11 kB

File Count

NPM Version

10.8.2

Node Version

18.20.6

Published on

May 06, 2025

Total Downloads

Cumulative downloads

Total Downloads

5,174,138

Last Day

44.9%

4,555

Compared to previous day

Last Week

12.3%

24,305

Compared to previous week

Last Month

-18.6%

98,093

Compared to previous month

Last Year

0.2%

1,308,075

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@contentful/f36-asset @contentful/f36-badge @contentful/f36-button @contentful/f36-core @contentful/f36-drag-handle @contentful/f36-icon @contentful/f36-icons @contentful/f36-menu @contentful/f36-skeleton @contentful/f36-tokens @contentful/f36-tooltip @contentful/f36-typography emotion truncate

Peer Dependencies

react react-dom

@contentful/f36-card

This package contains:

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Security-Policy

Determines if the project has published a security policy.

8

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

5

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

1

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 1

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/auto-approve.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/contentful/forma-36/auto-approve.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-cdn.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/contentful/forma-36/deploy-cdn.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy-cdn.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/contentful/forma-36/deploy-cdn.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/remove-stale.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/contentful/forma-36/remove-stale.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sast.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/contentful/forma-36/sast.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sast.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/contentful/forma-36/sast.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/size-limit.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/contentful/forma-36/size-limit.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/size-limit.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/contentful/forma-36/size-limit.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/contentful/forma-36/stale.yml/main?enable=pin
Info: 0 out of 5 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 4 third-party GitHubAction dependencies pinned
Info: 1 out of 1 npmCommand dependencies pinned

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

5.3

/10

Last Scanned on 2025-05-05

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More