npmpackage.info

Gathering detailed insights and metrics for @jayree/sfdx-plugin-prettier

@jayree/sfdx-plugin-prettier - 1.3.123 | npmpackage.info

@jayree/sfdx-plugin-prettier

A Salesforce CLI plugin containing a hook that uses prettier to format Salesforce metadata source files retrieved or pulled from Salesforce orgs.

1.3.123

BSD-3-Clause

TypeScript

1.16 MB

4.6

Installations

npm install @jayree/sfdx-plugin-prettier

Developer Guide

BETA

Typescript

No

Module System

ESM

Min. Node Version

>=16.0.0

Node Version

22.17.0

NPM Version

10.9.2 Pull Requests

Open

2

Total

1,365

Closed

146

Merged

1,217

Issues

Open

0

Total

1

Closed

1

Releases

175

v1.3.123

Updated on Jul 18, 2025

v1.3.122

Updated on Jul 11, 2025

v1.3.121

Updated on Jul 04, 2025

v1.3.120

Updated on Jun 27, 2025

v1.3.119

Updated on Jun 20, 2025

v1.3.118

Updated on Jun 13, 2025

View All 175 releases

Languages

TypeScript

JavaScript

Shell

Batchfile

TypeScript (76.78%)

JavaScript (20.27%)

Shell (2.35%)

Batchfile (0.6%)

Developer

jayree

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

BSD-3-Clause License

11 Stars

1,457 Commits

3 Watchers

7 Branches

2 Contributors

Updated on Jul 18, 2025

Maintainers

View All 2 Contributors

Package Meta Information

Latest Version

1.3.123

Package Id

@jayree/sfdx-plugin-prettier@1.3.123

Unpacked Size

1.16 MB

Size

309.47 kB

File Count

NPM Version

10.9.2

Node Version

22.17.0

Published on

Jul 18, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

@jayree/sfdx-plugin-prettier

A Salesforce CLI plugin containing a hook that uses prettier to format Salesforce metadata source files retrieved or pulled from Salesforce orgs.

sfdx-plugin-prettier is an sfdx plugin to format Salesforce metadata source files. It is triggered by the postsourceupdate hook after running force:source:retrieve or force:source:pull.

@jayree/sfdx-plugin-prettier

Install

1$ npm install -g @jayree/sfdx-plugin-prettier
2$ sfdx COMMAND
3running command...
4$ sfdx (--version)
5@jayree/sfdx-plugin-prettier/1.3.123 linux-x64 node-v22.17.0
6$ sfdx --help [COMMAND]
7USAGE
8  $ sfdx COMMAND
9...

Usage

Use force:source:retrieve or force:source:pull to tirgger the hook. The formatting is performed on the retrieved source files.

Configuration and Ignore Files

sfdx-plugin-prettier uses the .prettierrc, .prettierignore, and .editorconfig files in the sfdx project folder.

When the hook is executed for the first time, a sfdx-plugin-prettier setting is added to the sfdx-project.json file. Here you can enable or disable the hook by setting enabled to true or false (default). If you want the hook to remain disabled for a project, you can remove the setting again.

1{
2  "plugins": {
3    "sfdx-plugin-prettier": {
4      "enabled": true
5    }
6  }
7}

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

7

SAST

Determines if the project uses static code analysis.

3

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/jayree/sfdx-plugin-prettier/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/jayree/sfdx-plugin-prettier/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/jayree/sfdx-plugin-prettier/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/jayree/sfdx-plugin-prettier/codeql-analysis.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-reviewer.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/jayree/sfdx-plugin-prettier/dependabot-reviewer.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependabot-reviewer.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/jayree/sfdx-plugin-prettier/dependabot-reviewer.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/jayree/sfdx-plugin-prettier/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/jayree/sfdx-plugin-prettier/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/jayree/sfdx-plugin-prettier/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/jayree/sfdx-plugin-prettier/test.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/release.yml:32
Info: 0 out of 9 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

Score

4.6

/10

Last Scanned on 2025-07-14

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

@jayree/sfdx-plugin-prettier

Installations

Developer Guide

No

ESM

>=16.0.0

22.17.0

10.9.2

Pull Requests

2

1,365

146

1,217

Issues

0

1

1

Releases

Languages

Developer

jayree

Download Statistics

GitHub Statistics

Maintainers

Package Meta Information

Total Downloads

NaN

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

@jayree/sfdx-plugin-prettier

Install

Usage

Configuration and Ignore Files

10

10

10

10

7

3

0

0

0

0

0

0

4.6

/10