npmpackage.info

Gathering detailed insights and metrics for @fremtind/jkl-hamburger-react

@fremtind/jkl-hamburger-react - 12.0.16 | npmpackage.info

@fremtind/jkl-hamburger-react

Jøkul er et designsystem utviklet av Fremtind.

12.0.16

MIT

JavaScript

19.89 kB

5.8

Installations

npm install @fremtind/jkl-hamburger-react

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS, UMD

Node Version

18.20.4

NPM Version

lerna/7.0.2/node@v18.20.4+x64 (linux)

Pull Requests

Open

7

Total

3,225

Closed

582

Merged

2,636

Issues

Open

122

Total

1,637

Closed

1,515

Releases

@fremtind/jokul@0.71.2

Updated on Jul 02, 2025

@fremtind/jokul@0.71.1

Updated on Jun 25, 2025

@fremtind/jokul@0.71.0

Updated on Jun 25, 2025

@fremtind/jokul@0.70.0

Updated on Jun 24, 2025

@fremtind/jokul@0.69.2

Updated on Jun 19, 2025

View All 5 releases

Languages

JavaScript

TypeScript

SCSS

Less

Dockerfile

HTML

Shell

MDX

JavaScript (49.47%)

TypeScript (42.75%)

SCSS (7.48%)

Less (0.23%)

Dockerfile (0.05%)

HTML (0.01%)

Developer

fremtind

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

67 Stars

11,468 Commits

31 Forks

26 Watchers

28 Branches

125 Contributors

Updated on Jul 09, 2025

Maintainers

View All 125 Contributors

Package Meta Information

Latest Version

12.0.16

Package Id

@fremtind/jkl-hamburger-react@12.0.16

Unpacked Size

19.89 kB

Size

5.05 kB

File Count

NPM Version

lerna/7.0.2/node@v18.20.4+x64 (linux)

Node Version

18.20.4

Published on

Aug 27, 2024

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@fremtind/jkl-content-toggle-react @fremtind/jkl-core @fremtind/jkl-hamburger @fremtind/jkl-react-hooks classnames

Peer Dependencies

@types/react @types/react-dom react react-dom

`@fremtind/jkl-hamburger-react`

Se portalen for bruk og prinsipper.

Installasjon

Tips: stilpakken blir automatisk installert som en avhengighet.

npm i @fremtind/jkl-hamburger-react.
Importér både React-komponent og stilark i prosjektet ditt.

1import { Hamburger } from "@fremtind/jkl-hamburger-react";
2
3// Importer stilark via JavaScript med CSS-loader.
4import "@fremtind/jkl-hamburger/hamburger.min.css";

1// Eller importer stilark via SCSS.
2@use "@fremtind/jkl-hamburger/hamburger";

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Security-Policy

Determines if the project has published a security policy.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

8

SAST

Determines if the project uses static code analysis.

6

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

2

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 2

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/close-no-repro.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/close-no-repro.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/pull_request.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/pull_request.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pull_request.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/pull_request.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/pull_request.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request.yml:140: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/pull_request.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pull_request.yml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/pull_request.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request.yml:146: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/pull_request.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull_request_close.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/pull_request_close.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual_regression_test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/visual_regression_test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/visual_regression_test.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/visual_regression_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual_regression_test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/visual_regression_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual_regression_test.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/visual_regression_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual_regression_test.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/visual_regression_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual_regression_test.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/visual_regression_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual_regression_test.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/visual_regression_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual_regression_test.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/visual_regression_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/visual_regression_test.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/visual_regression_test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/weekly.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/weekly.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/weekly.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/weekly.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/weekly.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/weekly.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/weekly.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/fremtind/jokul/weekly.yml/main?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1
Warn: containerImage not pinned by hash: Dockerfile:14
Warn: containerImage not pinned by hash: Dockerfile:28
Warn: containerImage not pinned by hash: Dockerfile:48
Warn: npmCommand not pinned by hash: Dockerfile:5
Info: 0 out of 24 GitHub-owned GitHubAction dependencies pinned
Info: 6 out of 11 third-party GitHubAction dependencies pinned
Info: 0 out of 4 containerImage dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

Reason

detected GitHub workflow tokens with excessive permissions

Details

Warn: jobLevel 'actions' permission set to 'write': .github/workflows/build-and-deploy-portal.yml:19
Info: jobLevel 'contents' permission set to 'read': .github/workflows/build-and-deploy-portal.yml:20
Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:27
Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/codeql-analysis.yml:29
Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pull_request.yml:19
Info: jobLevel 'contents' permission set to 'read': .github/workflows/pull_request.yml:20
Info: jobLevel 'actions' permission set to 'read': .github/workflows/pull_request.yml:95
Info: jobLevel 'contents' permission set to 'read': .github/workflows/pull_request.yml:96
Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pull_request.yml:135
Info: jobLevel 'contents' permission set to 'read': .github/workflows/pull_request.yml:136
Warn: jobLevel 'actions' permission set to 'write': .github/workflows/pull_request_close.yml:13
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/pull_request_close.yml:14
Warn: jobLevel 'packages' permission set to 'write': .github/workflows/release.yml:19
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:18
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/release.yml:105
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/visual_regression_test.yml:24
Warn: jobLevel 'actions' permission set to 'write': .github/workflows/visual_regression_test.yml:23
Warn: jobLevel 'actions' permission set to 'write': .github/workflows/visual_regression_test.yml:107
Warn: jobLevel 'contents' permission set to 'write': .github/workflows/visual_regression_test.yml:108
Warn: no topLevel permission defined: .github/workflows/build-and-deploy-portal.yml:1
Warn: no topLevel permission defined: .github/workflows/close-no-repro.yml:1
Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1
Warn: no topLevel permission defined: .github/workflows/figma-token-sync-reminder.yml:1
Warn: no topLevel permission defined: .github/workflows/monthly.yml:1
Warn: no topLevel permission defined: .github/workflows/pull_request.yml:1
Warn: no topLevel permission defined: .github/workflows/pull_request_close.yml:1
Warn: no topLevel permission defined: .github/workflows/release.yml:1
Warn: no topLevel permission defined: .github/workflows/visual_regression_test.yml:1
Warn: no topLevel permission defined: .github/workflows/weekly.yml:1

0

Fuzzing

Determines if the project uses fuzzing.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

5.8

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More