Gathering detailed insights and metrics for @faressoft/node-pty-prebuilt
Gathering detailed insights and metrics for @faressoft/node-pty-prebuilt
A parallel fork of node-pty providing prebuilt packages for Node.js and Electron.
Installations
npm install @faressoft/node-pty-prebuiltDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Node Version
8.11.3
NPM Version
5.6.0
Score
60.6
Supply Chain
81.4
Quality
71.3
Maintenance
100
Vulnerability
99.3
License
Languages
4
TypeScript
C++
JavaScript
Python
TypeScript (51.87%)
C++ (42.25%)
JavaScript (3.79%)
Python (2.1%)
Developer
Download Statistics
Total Downloads
34,714
Last Day
2
Last Week
6
Last Month
29
Last Year
191
GitHub Statistics
NOASSERTION License
1 Stars
967 Commits
1 Watchers
3 Branches
1 Contributors
Updated on Sep 04, 2022
Bundle Size
15.54 kB
Minified
4.32 kB
Minified + Gzipped
Maintainers
1
Package Meta Information
Latest Version
0.9.0
Package Id
@faressoft/node-pty-prebuilt@0.9.0
Unpacked Size
1.03 MB
Size
230.08 kB
File Count
243
NPM Version
5.6.0
Node Version
8.11.3
Total Downloads
Cumulative downloads
Total Downloads
34,714
Last Day
-50%
2
Compared to previous day
Last Week
-14.3%
6
Compared to previous week
Last Month
26.1%
29
Compared to previous month
Last Year
-89.9%
191
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
2
node-pty-prebuilt
This project is a parallel fork of node-pty
providing prebuilt packages for certain Node.js and Electron versions.
Usage
Thanks to the excellent prebuild and
prebuild-install modules, using this module
is extremely easy. You merely have to change your node-pty dependency to
node-pty-prebuilt and then change any require statements in your code from
require('node-pty') to require('node-pty-prebuilt').
NOTE: We started shipping prebuilds as of node-pty version 0.7.3, no prior versions are provided! If you were using an earlier version of
node-ptyyou will need to update your code to account for any API changes that may have occurred.
How It Works
We maintain a parallel fork of the node-pty codebase that will be updated as new
releases are shipped. When we merge new updates to the code into the prebuild
branch, new prebuilt packages for our supported Node.js and Electron versions
are updated to the corresponding GitHub release.
When node-pty-prebuilt is installed as a package dependency, the
install script
checks to see if there's a prebuilt package on this repo for the OS, ABI version,
and architecture of the current process and then downloads it, extracting it into
the module path. If a corresponding prebuilt package is not found, node-gyp
is invoked to build the package for the current platform.
Prebuilt Versions
We currently build packages for all versions of Node.js and Electron that are
supported by the prebuild module. You can see the full list of versions by checking
out the supportedTargets
list in node-abi.
License
Copyright (c) 2012-2015, Christopher Jeffrey (MIT License). Copyright (c) 2016, Daniel Imms (MIT License). Copyright (c) 2018, Microsoft Corporation (MIT License). Copyright (c) 2018, David Wilson (MIT License). Copyright (c) 2019, Mohammad Fares (MIT License).
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
Found 0/30 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/build.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/faressoft/node-pty-prebuilt/build.yml/prebuild?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/faressoft/node-pty-prebuilt/build.yml/prebuild?enable=pin
- Warn: npmCommand not pinned by hash: examples/electron/npm_install.sh:13
- Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact v0.9.0 not signed: https://api.github.com/repos/faressoft/node-pty-prebuilt/releases/21630203
- Warn: release artifact v0.9.0 does not have provenance: https://api.github.com/repos/faressoft/node-pty-prebuilt/releases/21630203
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'prebuild'
Reason
19 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m
- Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
- Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
- Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
- Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx
- Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Score
2.3
/10
Last Scanned on 2025-06-16
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More