Gathering detailed insights and metrics for @eclipse-glsp-examples/workflow-theia
Gathering detailed insights and metrics for @eclipse-glsp-examples/workflow-theia
Integration of the web-based GLSP client with Eclipse Theia
Installations
npm install @eclipse-glsp-examples/workflow-theiaDeveloper Guide
BETA
Typescript
No
Module System
N/A
Node Version
16.18.1
NPM Version
lerna/4.0.0/node@v16.18.1+x64 (linux)
Releases
24
2.3.0 Release
v2.3.0
Updated on Dec 26, 2024
2.2.1 Release
v2.2.1
Updated on Jul 22, 2024
2.1.1 (Theia 1.49) Release
v2.1.1-theia1.49.0
Updated on Jul 08, 2024
2.1.x (Theia 1.45) Release
v2.1.0-theia1.45.0
Updated on Jun 24, 2024
2.1.1 Release
v2.1.1
Updated on Jun 24, 2024
2.1.0 Release
v2.1.0
Updated on Jun 24, 2024
Languages
4
TypeScript
CSS
Shell
JavaScript
TypeScript (92.68%)
CSS (5.76%)
Shell (1.24%)
JavaScript (0.32%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
NOASSERTION License
22 Stars
253 Commits
21 Forks
5 Watchers
39 Branches
21 Contributors
Updated on May 12, 2025
Maintainers
6
Package Meta Information
Latest Version
1.0.0-theia1.34.0
Package Id
@eclipse-glsp-examples/workflow-theia@1.0.0-theia1.34.0
Unpacked Size
37.89 MB
Size
33.96 MB
File Count
68
NPM Version
lerna/4.0.0/node@v16.18.1+x64 (linux)
Node Version
16.18.1
Published on
Feb 06, 2023
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
1
workflow-theia
This package contains the glue code to integrate the GLSP Workflow example language into a Theia applicatiopn.
This project is built with yarn and is available from npm via @eclipse-glsp-examples/workflow-theia.
Theia Version Compatibility
The @eclipse-glsp/workflow-theia package in version 1.0.0 is currently compatible with Theia >=1.25.0.
Theia releases currently have no stable public API so new Theia versions might introduce API breaks.
If that is the case, a new compatible 1.0.0 version prefixed with the supported minimal Theia version will be released (e.g. 1.0.0-theia1.27.0 for Theia >= 1.27.0).
| @eclipse-glsp/theia-integration | Theia |
|---|---|
| 0.8.0 | <=1.4.0 |
| 0.9.0 | >=1.20.0 <= 1.25.0 |
| 1.0.0 | >=1.25.0 <= 1.26.0 |
| 1.0.0-theia1.27.0 | >=1.27.0 |
| next | >=1.27.0 |
Note: Due to a transitive dependency to
sprotty-theiait's currently not possible to safely restrict the maximum version of Theia packages. If you encounter build errors related to multiple resolved Theia versions please add a resolutions block to thepackage.jsonof your project e.g. for1.0.0-theia1.27.0:
1... 2 "resolutions": { 3 "**/@theia/core": "1.27.0", 4 "**/@theia/editor": "1.27.0", 5 "**/@theia/filesystem": "1.27.0", 6 "**/@theia/messages": "1.27.0", 7 "**/@theia/monaco": "1.27.0" 8 }, 9...
More information
For more information, please visit the Eclipse GLSP Umbrella repository and the Eclipse GLSP Website. If you have questions, please raise them in the discussions and have a look at our communication and support options.
No vulnerabilities found.
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
SAST tool detected but not run on all commits
Details
- Info: SAST configuration detected: CodeQL
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
Found 15/23 approved changesets -- score normalized to 6
Reason
3 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 2
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dangerous workflow patterns detected
Details
- Warn: untrusted code checkout '${{ github.event.workflow_run.head_commit.id || github.sha }}': .github/workflows/publish-next.yml:20
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:24
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:25
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1
- Warn: no topLevel permission defined: .github/workflows/e2e.yml:1
- Warn: no topLevel permission defined: .github/workflows/multi-os-node.yml:1
- Warn: no topLevel permission defined: .github/workflows/theia-compat.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/codeql-analysis.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/codeql-analysis.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/codeql-analysis.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/codeql-analysis.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/e2e.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/e2e.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/e2e.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/e2e.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/e2e.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/multi-os-node.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/multi-os-node.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/multi-os-node.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/multi-os-node.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/multi-os-node.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/multi-os-node.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-next.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/publish-next.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-next.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/publish-next.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-next.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/publish-next.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/theia-compat.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/theia-compat.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/theia-compat.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/theia-compat.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/theia-compat.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/theia-compat.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/theia-compat.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/theia-compat.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/theia-compat.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/eclipse-glsp/glsp-theia-integration/theia-compat.yml/master?enable=pin
- Info: 0 out of 26 GitHub-owned GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
13 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
- Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
- Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-vhxf-7vqr-mrjg
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-44fp-w29j-9vj5
- Warn: Project is vulnerable to: GHSA-4pg4-qvpc-4q3h
- Warn: Project is vulnerable to: GHSA-g5hg-p3ph-g8qg
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
Score
3.3
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More