Gathering detailed insights and metrics for @definitelytyped/dts-critic
Gathering detailed insights and metrics for @definitelytyped/dts-critic
Gathering detailed insights and metrics for @definitelytyped/dts-critic
Gathering detailed insights and metrics for @definitelytyped/dts-critic
npm install @definitelytyped/dts-critic
Typescript
Module System
Min. Node Version
Node Version
NPM Version
@definitelytyped/header-parser@0.2.19
Updated on Apr 04, 2025
@definitelytyped/dtslint-runner@0.1.36
Updated on Apr 04, 2025
@definitelytyped/dtslint@0.2.32
Updated on Apr 04, 2025
@definitelytyped/dts-critic@0.1.20
Updated on Apr 04, 2025
@definitelytyped/definitions-parser@0.1.22
Updated on Apr 04, 2025
@definitelytyped/dtslint-runner@0.1.35
Updated on Apr 02, 2025
TypeScript (92.29%)
JavaScript (7.71%)
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
MIT License
394 Stars
3,036 Commits
218 Forks
12 Watchers
27 Branches
242 Contributors
Updated on Jul 14, 2025
Latest Version
0.1.20
Package Id
@definitelytyped/dts-critic@0.1.20
Unpacked Size
97.06 kB
Size
21.84 kB
File Count
11
NPM Version
10.8.2
Node Version
20.19.0
Published on
Apr 04, 2025
Cumulative downloads
Total Downloads
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
3
1
Checks a new dts against the Javascript sources and tells you what problems it has.
Build the program:
1$ npm run build
Run the program using node:
1$ node dist/index.js --dts=path-to-d.ts [--js=path-to-source] [--mode=mode] [--debug]
If the d.ts path is to a file named index.d.ts
, the name of the directory
will be used as the package name instead. For example
~/dt/types/jquery/index.d.ts
will use jquery
as the name.
path-to-source
is optional; if you leave it off, the code will
check npm for a package with the same name as the d.ts.
You can run dts-critic in different modes that affect which checks will be performed:
name-only
: dts-critic will check your package name and DefinitelyTyped header (if present) against npm packages.
For example, if your declaration is for an npm package called 'cool-js-package', it will check if a
package named 'cool-js-package' actually exists in npm.
code
: in addition to the checks performed in name-only
mode, dts-critic will check if your
declaration exports match the source JavaScript module exports.
For example, if your declaration has a default export, it will check if the JavaScript module also
has a default export.
If your declaration is for an npm package:
code
mode, your declaration must also match the source JavaScript module.If your declaration is for a non-npm package (in other words, if your declaration has a
Definitely Typed-conforming package.json with "nonNpm": true
):
code
mode and a path to the JavaScript source file was provided, your
declaration must also match the source JavaScript module.Note that for real use on Definitely Typed, a lot of these checks need to be pretty loose.
The tests use the Jest framework. To build and execute the tests, run:
1$ npm run test
This will build the program and run jest.
No vulnerabilities found.
Reason
all changesets reviewed
Reason
12 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
security policy file detected
Details
Reason
license file detected
Details
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
dependency not pinned by hash detected -- score normalized to 9
Details
Reason
SAST tool detected but not run on all commits
Details
Reason
branch protection is not maximal on development and all release branches
Details
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
Reason
project is not fuzzed
Details
Reason
16 existing vulnerabilities detected
Details
Score
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More