npmpackage.info

Gathering detailed insights and metrics for @extra-array/set-path-update

@extra-array/set-path-update - 2.10.19 | npmpackage.info

@extra-array/set-path-update

An array is a collection of values, stored contiguously.

2.10.19

MIT

TypeScript

307.00 B

3,421 3.2

Installations

npm install @extra-array/set-path-update

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS, ESM

Node Version

17.5.0

NPM Version

8.4.1 Score

67.7

Supply Chain

84.8

Quality

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

7

Closed

4

Merged

3

Issues

Open

0

Total

5

Closed

5

Releases

An array is a collection of values, stored contiguously.

4.1.15

Updated on May 09, 2023

A collection of functions for working with Arrays.

3.1.0

Updated on Nov 20, 2022

View All 2 releases

Languages

TypeScript

JavaScript

TypeScript (95.89%)

JavaScript (4.11%)

Developer

nodef

Download Statistics

Total Downloads

3,421

Last Day

Last Week

Last Month

Last Year

578

GitHub Statistics

MIT License

16 Stars

566 Commits

5 Forks

2 Watchers

3 Branches

4 Contributors

Updated on Apr 09, 2025

Bundle Size

523.00 B

Minified

307.00 B

Minified + Gzipped

Bundlephobia

Maintainers

View All 4 Contributors

Package Meta Information

Latest Version

2.10.19

Package Id

@extra-array/set-path-update@2.10.19

Unpacked Size

5.25 kB

Size

2.28 kB

File Count

NPM Version

8.4.1

Node Version

17.5.0

Total Downloads

Cumulative downloads

Total Downloads

3,421

Last Day

Compared to previous day

Last Week

-50%

Compared to previous week

Last Month

44.4%

Compared to previous month

Last Year

1.4%

578

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Sets value at path in a nested array. :package: :smiley_cat: :running: :vhs: :moon: :scroll: :newspaper: :blue_book:

Alternatives: set, set$, setPath$.
Similar: hasPath, getPath, setPath$, removePath$.
Similar: get, set, remove.

This is part of package extra-array.

1array.setPath$(x, p, v);
2// x: a nested array (updated)
3// p: path
4// v: value
5// → x

1const array = require("extra-array");
2
3var x = [[2, 4], 6, 8];
4array.setPath$(x, [1], 60);
5// [ [ 2, 4 ], 60, 8 ]
6
7x;
8// [ [ 2, 4 ], 60, 8 ]
9
10array.setPath$(x, [0, 1], 40);
11// [ [ 2, 40 ], 60, 8 ]
12
13array.setPath$(x, [0, 1, 2], 100);
14// [ [ 2, 40 ], 60, 8 ] (path not present, no effect)

References

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

5

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

4

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 4

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/pr.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/nodef/extra-array/pr.yml/master?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:80
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:63
Info: 0 out of 10 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 4 third-party GitHubAction dependencies pinned
Info: 5 out of 7 npmCommand dependencies pinned

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

SAST

Determines if the project uses static code analysis.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

Score

3.2

/10

Last Scanned on 2025-06-30

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More