Gathering detailed insights and metrics for @cutting/svg
Gathering detailed insights and metrics for @cutting/svg
Installations
npm install @cutting/svgReleases
455
@cutting/eslint-config@5.0.0
@cutting/eslint-config@5.0.0
Published on 29 Aug 2024
@cutting/eslint-config@4.46.0
@cutting/eslint-config@4.46.0
Published on 05 Jul 2024
@cutting/use-shortcuts@4.46.15
@cutting/use-shortcuts@4.46.15
Published on 25 Jun 2024
@cutting/svg@4.54.23
@cutting/svg@4.54.23
Published on 25 Jun 2024
@cutting/use-mathjax@4.50.17
@cutting/use-mathjax@4.50.17
Published on 25 Jun 2024
@cutting/use-get-parent-size@2.1.16
@cutting/use-get-parent-size@2.1.16
Published on 25 Jun 2024
Developer
dagda1
Developer Guide
BETA
Module System
ESM
Min. Node Version
Typescript Support
Yes
Node Version
18.20.3
NPM Version
10.7.0
Statistics
34 Stars
2,500 Commits
2 Forks
2 Watching
15 Branches
2 Contributors
Updated on 07 Nov 2024
Bundle Size
13.07 kB
Minified
4.54 kB
Minified + Gzipped
Languages
JavaScript (69.29%)
TypeScript (25.26%)
CSS (3.45%)
HTML (1.31%)
MDX (0.47%)
Shell (0.13%)
Dockerfile (0.09%)
Arc (0.01%)
Total Downloads
Cumulative downloads
Total Downloads
38,465
Last day
200%
3
Compared to previous day
Last week
595%
139
Compared to previous week
Last month
-1.9%
208
Compared to previous month
Last year
-71.3%
4,524
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Versions
Cutting Monorepo
Prerequisites
- Install Node.js from http://nodejs.org or from your favorite package manager. At least version 9.3 is required.
This is the main monorepo README. The monorepo contains the following packages:
- @cutting/devtools - Common webpack, vitest and npm scripts
- @cutting/util - Any common functionality applicable to all packages can be found here.
- @cutting/use-shortcuts - Effortlessly create keyboard shortcust with this react hook.
- @cutting/component-library - Common react components that can be shared among all projects. This ensures consistency in both styling and functionality. The atomic design methodology will be used to add a logical grouping to the component structure.
- @cutting/website - Frontend main site code for the cutting website
Each subpackage above can be deployed or imported as an npm package in isolation.
All packages have tests and most part from util have their own viewable demo webserver to display the current functionality.
Installation instructions
pnpm is the package manager used throughout the monorepo.
To check everything is working locally, run the following commands:
1pnpm install 2pnpm run start
When these commands have finished open a browser at http://localhost:3000
Run tests
A combination of the test runner vitest and react-testing-library are used to unit test the code.
You will need to have perviously ran pnpm install before running:
1pnpm test
This will run unit tests in every subpackage of the monorepo. Each subpackage has its own suite of tests that can be executed with the same command when executed in the subdirectory.
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1
Reason
Found 0/4 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/build-deploy.yml:1
- Warn: no topLevel permission defined: .github/workflows/tmate.yml:1
- Warn: no topLevel permission defined: .github/workflows/validate.yml:1
- Warn: no topLevel permission defined: .github/workflows/version.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
license file not detected
Details
- Warn: project does not have a license file
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-deploy.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/build-deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-deploy.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/build-deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-deploy.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/build-deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-deploy.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/build-deploy.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-deploy.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/build-deploy.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-deploy.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/build-deploy.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-deploy.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/build-deploy.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-deploy.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/build-deploy.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tmate.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/tmate.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tmate.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/tmate.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/validate.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/validate.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/validate.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/validate.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/validate.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/validate.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/version.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/version.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/version.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/version.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/version.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/version.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/version.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/version.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/version.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/version.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/version.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/dagda1/cuttingedge/version.yml/main?enable=pin
- Warn: containerImage not pinned by hash: apps/website/Dockerfile:2: pin your Docker image by updating node:18.12.0 to node:18.12.0@sha256:cef9966b19672effeafcf1a67b8add742c3e46ca7dd5532efff60820526c2e95
- Warn: containerImage not pinned by hash: apps/website/nginx/Dockerfile:1: pin your Docker image by updating nginx:1.26 to nginx:1.26@sha256:43d396487b4b924c47fa5823678e7e99f8241eda2394afd8f4fc8f3c286c2d5e
- Warn: npmCommand not pinned by hash: apps/website/Dockerfile:44
- Info: 0 out of 10 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 10 third-party GitHubAction dependencies pinned
- Info: 0 out of 2 containerImage dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 27 are checked with a SAST tool
Reason
19 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-64vr-g452-qvp3
- Warn: Project is vulnerable to: GHSA-9cwx-2883-4wfx
- Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
Score
2.5
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More