npmpackage.info

Gathering detailed insights and metrics for @keymanapp/kmc-analyze

@keymanapp/kmc-analyze - 18.0.238 | npmpackage.info

@keymanapp/kmc-analyze

Keyman cross platform input methods system running on Android, iOS, Linux, macOS, Windows and mobile and desktop web

18.0.238

463

NOASSERTION

Pascal

53.05 kB

4.8

Installations

npm install @keymanapp/kmc-analyze

Developer Guide

BETA

Typescript

No

Module System

ESM

Node Version

20.16.0

NPM Version

10.5.1 Pull Requests

Open

51

Total

9,187

Closed

334

Merged

8,802

Issues

Open

1,036

Total

5,083

Closed

4,047

Releases

linux-release-stable-11.0.120

Updated on Feb 25, 2019

v2.0.377

Updated on Jan 27, 2015

View All 2 releases

Languages

Pascal

C++

TypeScript

JavaScript

Swift

Java

Shell

Objective-C

HTML

XSLT

CSS

Python

Meson

Makefile

Perl

Batchfile

Roff

Dockerfile

Objective-C++

PowerShell

Rich Text Format

AppleScript

Ruby

VBScript

Lua

Kaitai Struct

Pawn

Pascal (77.04%)

C++ (5.89%)

TypeScript (5.49%)

JavaScript (3.48%)

Swift (1.41%)

Java (1.3%)

Shell (1.25%)

C (1.17%)

Objective-C (0.69%)

HTML (0.57%)

XSLT (0.52%)

CSS (0.41%)

Python (0.4%)

Meson (0.12%)

Makefile (0.05%)

Perl (0.05%)

Batchfile (0.04%)

Roff (0.03%)

M4 (0.02%)

Dockerfile (0.02%)

Objective-C++ (0.01%)

PowerShell (0.01%)

Rich Text Format (0.01%)

AppleScript (0.01%)

Developer

keymanapp

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

NOASSERTION License

463 Stars

31,683 Commits

121 Forks

27 Watchers

70 Branches

45 Contributors

Updated on Jul 11, 2025

Maintainers

View All 45 Contributors

Package Meta Information

Latest Version

18.0.238

Package Id

@keymanapp/kmc-analyze@18.0.238

Unpacked Size

53.05 kB

Size

12.74 kB

File Count

NPM Version

10.5.1

Node Version

20.16.0

Published on

Jun 04, 2025

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@keymanapp/common-types @keymanapp/developer-utils @keymanapp/kmc-kmn

Dev Dependencies

@keymanapp/resources-gosh @types/mocha @types/node c8 chalk mocha typescript

Keyman Developer - kmc-analyze

This package provides Keyman keyboard analysis tools. It can be used from the command line with @keymanapp/kmc.

Currently, the primary function of this package is to work with Keyman's &displayMap store for rewriting the On Screen Keyboard with PUA characters, for consistent display of diacritics and combining marks across all platforms.

API Reference

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

9

License

Determines if the project has defined a license.

9

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

2

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 2

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/crowdin.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/keymanapp/keyman/crowdin.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/crowdin.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/keymanapp/keyman/crowdin.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/keymanapp/keyman/labeler.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-build-status.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/keymanapp/keyman/pr-build-status.yml/master?enable=pin
Warn: containerImage not pinned by hash: docs/settings/linux/.devcontainer/Dockerfile:6
Warn: containerImage not pinned by hash: resources/docker-images/android/Dockerfile:5
Warn: containerImage not pinned by hash: resources/docker-images/base/Dockerfile:6
Warn: containerImage not pinned by hash: resources/docker-images/core/Dockerfile:9
Warn: containerImage not pinned by hash: resources/docker-images/developer/Dockerfile:9
Warn: containerImage not pinned by hash: resources/docker-images/linux/Dockerfile:5
Warn: containerImage not pinned by hash: resources/docker-images/web/Dockerfile:9
Warn: downloadThenRun not pinned by hash: resources/docker-images/base/Dockerfile:45-46
Warn: npmCommand not pinned by hash: resources/docker-images/core/Dockerfile:47-50
Warn: npmCommand not pinned by hash: resources/docker-images/developer/Dockerfile:47-50
Warn: npmCommand not pinned by hash: resources/docker-images/web/Dockerfile:71-74
Warn: npmCommand not pinned by hash: developer/src/server/build.sh:130
Warn: pipCommand not pinned by hash: linux/keyman-config/build.sh:115
Warn: pipCommand not pinned by hash: linux/keyman-config/build.sh:116
Warn: pipCommand not pinned by hash: linux/keyman-config/build.sh:126
Warn: pipCommand not pinned by hash: linux/keyman-config/run-tests.sh:32
Warn: npmCommand not pinned by hash: resources/build/report-history.sh:96
Warn: npmCommand not pinned by hash: resources/locate_emscripten.inc.sh:82
Warn: pipCommand not pinned by hash: resources/teamcity/includes/tc-actions.inc.sh:33
Warn: downloadThenRun not pinned by hash: resources/teamcity/includes/tc-linux.inc.sh:61
Info: 10 out of 13 GitHub-owned GitHubAction dependencies pinned
Info: 5 out of 6 third-party GitHubAction dependencies pinned
Info: 0 out of 7 containerImage dependencies pinned
Info: 0 out of 2 downloadThenRun dependencies pinned
Info: 3 out of 9 npmCommand dependencies pinned
Info: 0 out of 5 pipCommand dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Security-Policy

Determines if the project has published a security policy.

0

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

0

SAST

Determines if the project uses static code analysis.

0

Fuzzing

Determines if the project uses fuzzing.

Score

4.8

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More