npmpackage.info

Gathering detailed insights and metrics for @hint/hint-sri

Other packages similar to @hint/hint-sri

hint

7.1.13

The linting tool for the web

@hint/hint-css-prefix-order

1.5.8

Ensure vendor-prefixed versions of a CSS property are listed before the unprefixed version.

@hint/hint-no-inline-styles

1.0.19

Invalidate the use of CSS inline styles in HTML

@hint/hint-no-http-redirects

3.0.23

hint for best practices related to HTTP redirects

Gathering detailed insights and metrics for @hint/hint-sri

@hint/hint-sri

💡 A hinting engine for the web

4.0.23

3,627

Apache-2.0

TypeScript

4,632,844 3.5

Installations

npm install @hint/hint-sri

Score

53.8

Supply Chain

86.2

Quality

75.9

Maintenance

Vulnerability

93.7

License

Pull Requests

Open

139

Total

4,080

Closed

1,360

Merged

2,581

Issues

Open

320

Total

1,830

Closed

1,510

Releases

954

Dist files

dist

Published on 01 Oct 2019

configuration-development-v6.1.1

Published on 07 Mar 2019

hint-sri-v3.0.5

Published on 07 Mar 2019

hint-no-vulnerable-javascript-libraries-v2.7.0

Published on 07 Mar 2019

hint-css-prefix-order-v1.0.2

Published on 07 Mar 2019

hint-amp-validator-v2.7.0

Published on 07 Mar 2019

View all 954 releases

Developer

webhintio

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

Yes

Node Version

18.19.1

NPM Version

10.5.0 Statistics

3,627 Stars

6,372 Commits

687 Forks

74 Watching

157 Branches

105 Contributors

Updated on 27 Nov 2024

Languages

TypeScript (91.49%)

JavaScript (4.96%)

CSS (2.22%)

Handlebars (0.76%)

EJS (0.5%)

HTML (0.06%)

Batchfile (0.01%)

Shell (0.01%)

Total Downloads

Cumulative downloads

Total Downloads

4,632,844

Last day

-25.6%

3,289

Compared to previous day

Last week

-15.7%

21,643

Compared to previous week

Last month

-24.8%

98,660

Compared to previous month

Last year

-39.3%

998,528

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Versions

webhint

Quick start user guide

webhint is a customizable linting tool that helps you improve your site's accessibility, speed, cross-browser compatibility, and more by checking your code for best practices and common errors.

It can be run from the command line (CLI), via a browser extension, and as a VS Code extension.

To use it from the CLI you will need to install Node.js (v14.x or later) on your machine, and you can use npx to test it.

Testing with `npx`

Run the following command:

1npx hint https://example.com

This will analyze https://example.com using the default configuration.

Installing `webhint` locally

Install webhint as a devDependency of your project:

1npm install hint --save-dev

And then add a script task to your package.json:

1{
2    ...
3    "scripts": {
4        "webhint": "hint"
5    }
6}

And run it via:

1npm run webhint -- http://localhost:8080

Or if you are using yarn you can skip the step to create a task and run directly:

1yarn hint http://localhost:8080

To know more about webhint, how to configure it, etc. see the online user guide, or the local version for the most recent content.

Contributing to webhint

This project follows a monorepo pattern. That means that the code for all the webhint flavors (CLI, browser and VS Code extension, hints, formatters, etc.) are in here and are published as separate npm packages.

To build the project from the source you will need to install a recent version of node and yarn. Once you've done this run the following from the root of your cloned version:

1yarn
2yarn build

This can take a bit so please be patient.

To learn more about the internals of webhint, the structure of the project, how to create new hints, parsers, formatters, etc, take a look at the online contributor guide (or the local version).

Contributing to the browser and VS Code extensions

To learn about how to build one of the extensions please check the CONTRIBUTING.md files for each of these packages:

packages/extension-browser/CONTRIBUTING.md for the browser extension.
packages/extension-vscode/CONTRIBUTING.md for the VS Code extension.

Code of Conduct

All projects in the webhintio organization follow this CoC which adheres to the OpenJS Foundation Code of Conduct.

License

The code is available under the Apache 2.0 license.

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Signed-Releases

Determines if the project cryptographically signs release artifacts.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

49 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-r5fx-8r73-v86c
Warn: Project is vulnerable to: GHSA-28hp-fgcr-2r4h
Warn: Project is vulnerable to: GHSA-89mq-4x47-5v83
Warn: Project is vulnerable to: GHSA-5cp4-xmrw-59wf
Warn: Project is vulnerable to: GHSA-mhp6-pxh8-r675
Warn: Project is vulnerable to: GHSA-2qqx-w9hr-q5gx
Warn: Project is vulnerable to: GHSA-2vrf-hf26-jrp5
Warn: Project is vulnerable to: GHSA-4w4v-5hc9-xrr2
Warn: Project is vulnerable to: GHSA-m9gf-397r-hwpg
Warn: Project is vulnerable to: GHSA-mqm9-c95h-x2p6
Warn: Project is vulnerable to: GHSA-prc3-vjfx-vhm9
Warn: Project is vulnerable to: GHSA-qwqh-hm9m-p5hr
Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25
Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
Warn: Project is vulnerable to: GHSA-8gh8-hqwg-xf34
Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q
Warn: Project is vulnerable to: GHSA-rmxg-73gg-4p98
Warn: Project is vulnerable to: GHSA-6c3j-c64m-qhgq
Warn: Project is vulnerable to: GHSA-gxr4-xjj5-5px2
Warn: Project is vulnerable to: GHSA-jpcq-cgw6-v4j6
Warn: Project is vulnerable to: GHSA-8cf7-32gw-wr33
Warn: Project is vulnerable to: GHSA-hjrf-2m68-5959
Warn: Project is vulnerable to: GHSA-qwph-4952-7xr6
Warn: Project is vulnerable to: GHSA-vcjj-xf2r-mwvc
Warn: Project is vulnerable to: GHSA-6vfc-qv3f-vr6c
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-566m-qj78-rww5
Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
Warn: Project is vulnerable to: GHSA-hwj9-h5mp-3pm3
Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc

Score

3.5

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to @hint/hint-sri

Other packages similar to @hint/hint-sri

@hint/hint-sri

Installations

Score

Pull Requests

139

4,080

1,360

2,581

Issues

320

1,830

1,510

Releases

Developer

Developer Guide

CommonJS

Yes

18.19.1

10.5.0

Statistics

Languages

Total Downloads

4,632,844

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

Dev Dependencies

webhint

Quick start user guide

Testing with npx

Installing webhint locally

Contributing to webhint

Contributing to the browser and VS Code extensions

Code of Conduct

Other important links

License

10

10

10

10

1

0

0

0

0

0

0

0

0

3.5

/10

Testing with `npx`

Installing `webhint` locally