npmpackage.info

Gathering detailed insights and metrics for @destinationstransfers/git-rev-sync

@destinationstransfers/git-rev-sync

Simple Node module that synchronously returns short version of current git commit hash

2.1.0

MIT

JavaScript

16.26 kB

61,611 1.6

Installations

npm install @destinationstransfers/git-rev-sync

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Min. Node Version

>=8

Node Version

12.8.1

NPM Version

6.10.2 Score

63.5

Supply Chain

61.9

Quality

74.9

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

8

Total

469

Closed

59

Merged

402

Issues

Open

1

Total

4

Closed

3

Releases

2.1.0

Published on 20 Aug 2019

v2.0.0

Published on 19 Aug 2019

View all 2 releases

Contributors

Unable to fetch Contributors

View all 2 contributors

Languages

JavaScript

JavaScript (100%)

Developer

destinationstransfers

Download Statistics

Total Downloads

61,611

Last Day

Last Week

Last Month

Last Year

250

GitHub Statistics

550 Commits

3 Watching

10 Branches

2 Contributors

Bundle Size

51.94 kB

Minified

16.26 kB

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

2.1.0

Package Id

@destinationstransfers/git-rev-sync@2.1.0

Unpacked Size

4.34 kB

Size

2.15 kB

File Count

NPM Version

6.10.2

Node Version

12.8.1

Total Downloads

Cumulative downloads

Total Downloads

61,611

Last day

Compared to previous day

Last week

-81.8%

Compared to previous week

Last month

233.3%

Compared to previous month

Last year

-39.5%

250

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

env-ci find-up

Dev Dependencies

@destinationstransfers/eslint-plugin @types/node eslint jest

Versions

git-rev-sync

Simple Node module that synchronously returns short version of current git commit hash

npm node

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

1

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 1

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npmpublish.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/tinovyatkin/git-rev-sync/npmpublish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npmpublish.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/tinovyatkin/git-rev-sync/npmpublish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npmpublish.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/tinovyatkin/git-rev-sync/npmpublish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npmpublish.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/tinovyatkin/git-rev-sync/npmpublish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npmpublish.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/tinovyatkin/git-rev-sync/npmpublish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npmpublish.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/tinovyatkin/git-rev-sync/npmpublish.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/tinovyatkin/git-rev-sync/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/tinovyatkin/git-rev-sync/test.yml/master?enable=pin
Warn: downloadThenRun not pinned by hash: .github/workflows/test.yml:24
Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned
Info: 2 out of 2 npmCommand dependencies pinned
Info: 0 out of 1 downloadThenRun dependencies pinned

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

1.6

/10

Last Scanned on 2025-02-03

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More