Gathering detailed insights and metrics for @formsort/react-embed
Gathering detailed insights and metrics for @formsort/react-embed
Installations
npm install @formsort/react-embedDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Node Version
20.12.2
NPM Version
10.5.0
Releases
49
Languages
4
TypeScript
JavaScript
HTML
CSS
TypeScript (85.91%)
JavaScript (10.89%)
HTML (2.83%)
CSS (0.37%)
Developer
formsort
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
21 Stars
515 Commits
4 Forks
5 Watchers
13 Branches
11 Contributors
Updated on Jul 14, 2025
Maintainers
6
Package Meta Information
Latest Version
3.3.1
Package Id
@formsort/react-embed@3.3.1
Unpacked Size
15.02 kB
Size
4.01 kB
File Count
6
NPM Version
10.5.0
Node Version
20.12.2
Published on
Jul 03, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Peer Dependencies
1
@formsort/react-embed
Embed Formsort flows within react components.
This is a handy wrapper around @formsort/web-embed-api.
Important note: This package is intended for use in React web applications. If you're looking to embed Formsort flows in React Native applications, please see React native embed guide.
Installation
Add @formsort/react-embed to your project by executing yarn add @formsort/react-embed or npm install @formsort/react-embed.
Usage
Here's an example of basic usage:
1import React from 'react'; 2import EmbedFlow from '@formsort/react-embed'; 3 4const EmbedFlowExample: React.FunctionComponent = () => ( 5 <div> 6 <EmbedFlow 7 clientLabel="formsort" 8 flowLabel="onboarding" 9 variantLabel="main" 10 embedConfig={{ 11 style: { 12 width: '100%', 13 height: '100%', 14 }, 15 }} 16 /> 17 </div> 18);
Events
You can add event listeners to flows like Flowloaded, redirect etc. See all event listeners
Props
| Prop name | Description | Required | Example values |
|---|---|---|---|
| clientLabel | client name | yes | formsort |
| flowLabel | flow name | yes | onboarding |
| variantLabel | variant name | no | main |
| responderUuid | responder uuid to load existing answers for | no | e4923baa-dc2d-4555-813c-a166952292fa |
| formsortEnv | formsort integrations environment label, if not using production | no | staging |
| queryParams | additional query params, to pre-populate answers in the form | no | [['name', 'Olivia'], ['age', '3']] |
| embedConfig | config passed to the underlying FormsortWebEmbed | no | { style: { height: '100%' } } |
| onFlowLoaded | event listener | no | () => { console.log('flow loaded') } |
| onFlowClosed | event listener | no | () => { console.log('flow closed') } |
| onFlowFinalized | event listener | no | () => { console.log('flow finalized') } |
| onStepLoaded | event listener | no | () => { console.log('step loaded') } |
| onStepCompleted | event listener | no | () => { console.log('step loaded') } |
| onRedirect | event listener | no | (url: string) => { console.log('redirecting to:', url) } |
| onUnauthorized | event listener | no | () => { console.log('ID token is missing or invalid.') } |
Loading a specific variant revision
You can use query parameters to load a specific variant revision. Don't use it if you want to show latest variant.
1import React from 'react'; 2import EmbedFlow from '@formsort/react-embed'; 3 4const EmbedFlowExample: React.FunctionComponent = () => ( 5 <div> 6 <EmbedFlow 7 clientLabel="formsort" 8 flowLabel="onboarding" 9 variantLabel="main" 10 queryParams={['variantRevisionUuid', '<uuidv4>']} 11 /> 12 </div> 13);
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
no binaries found in the repo
Reason
SAST tool detected but not run on all commits
Details
- Info: SAST configuration detected: CodeQL
- Warn: 13 commits out of 16 are checked with a SAST tool
Reason
8 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 6
Reason
Found 0/26 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/build.yml:1
- Warn: no topLevel permission defined: .github/workflows/release.yml:1
- Info: topLevel 'actions' permission set to 'read': .github/workflows/sast.yml:13
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/sast.yml:14
- Warn: topLevel 'security-events' permission set to 'write': .github/workflows/sast.yml:16
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/build.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sast.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/sast.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sast.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/sast.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sast.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/sast.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sast.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/sast.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sast.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/sast.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sast.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/sast.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/sast.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/sast.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sast.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/sast.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sast.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/sast.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/sast.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/sast.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sast.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/formsort/oss/sast.yml/master?enable=pin
- Info: 0 out of 12 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 2 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
license file not detected
Details
- Warn: project does not have a license file
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact react-embed-3.3.1 not signed: https://api.github.com/repos/formsort/oss/releases/229710814
- Warn: release artifact constants-1.12.0 not signed: https://api.github.com/repos/formsort/oss/releases/202549870
- Warn: release artifact web-embed-api-2.7.0 not signed: https://api.github.com/repos/formsort/oss/releases/175949924
- Warn: release artifact react-embed-3.3.0 not signed: https://api.github.com/repos/formsort/oss/releases/175953574
- Warn: release artifact embed-messaging-manager-0.2.0 not signed: https://api.github.com/repos/formsort/oss/releases/175944883
- Warn: release artifact react-embed-3.3.1 does not have provenance: https://api.github.com/repos/formsort/oss/releases/229710814
- Warn: release artifact constants-1.12.0 does not have provenance: https://api.github.com/repos/formsort/oss/releases/202549870
- Warn: release artifact web-embed-api-2.7.0 does not have provenance: https://api.github.com/repos/formsort/oss/releases/175949924
- Warn: release artifact react-embed-3.3.0 does not have provenance: https://api.github.com/repos/formsort/oss/releases/175953574
- Warn: release artifact embed-messaging-manager-0.2.0 does not have provenance: https://api.github.com/repos/formsort/oss/releases/175944883
Reason
14 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986 / GHSA-64vr-g452-qvp3
- Warn: Project is vulnerable to: GHSA-9cwx-2883-4wfx
- Warn: Project is vulnerable to: GHSA-vg6x-rcgg-rjx6
- Warn: Project is vulnerable to: GHSA-x574-m823-4x7w
- Warn: Project is vulnerable to: GHSA-4r4m-qw57-chr8
- Warn: Project is vulnerable to: GHSA-xcj6-pq6g-qj4x
- Warn: Project is vulnerable to: GHSA-356w-63v5-8wf4
- Warn: Project is vulnerable to: GHSA-859w-5945-r5v3
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Score
3.9
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More