Gathering detailed insights and metrics for @lit-labs/cli-localize
Gathering detailed insights and metrics for @lit-labs/cli-localize
Lit is a simple library for building fast, lightweight web components.
Installations
npm install @lit-labs/cli-localizeDeveloper Guide
BETA
Typescript
Yes
Module System
ESM
Min. Node Version
>=14.8.0
Node Version
20.16.0
NPM Version
10.8.1
Releases
566
lit-element@4.2.1
lit-element@4.2.1
Updated on Jul 11, 2025
@lit-labs/virtualizer@2.1.1
@lit-labs/virtualizer@2.1.1
Updated on Jul 11, 2025
@lit/react@1.0.8
@lit/react@1.0.8
Updated on Jul 11, 2025
@lit/reactive-element@2.1.1
@lit/reactive-element@2.1.1
Updated on Jul 11, 2025
@lit-labs/signals@0.1.3
@lit-labs/signals@0.1.3
Updated on Jul 11, 2025
@lit/task@1.0.3
@lit/task@1.0.3
Updated on Jul 11, 2025
Languages
6
TypeScript
JavaScript
HTML
CSS
Vue
Shell
TypeScript (58.93%)
JavaScript (38.48%)
HTML (2.19%)
CSS (0.23%)
Vue (0.17%)
Shell (0.01%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
BSD-3-Clause License
19,926 Stars
2,572 Commits
976 Forks
211 Watchers
217 Branches
194 Contributors
Updated on Jul 12, 2025
Maintainers
11
Package Meta Information
Latest Version
0.2.1
Package Id
@lit-labs/cli-localize@0.2.1
Unpacked Size
28.06 kB
Size
9.55 kB
File Count
9
NPM Version
10.8.1
Node Version
20.16.0
Published on
Aug 05, 2024
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
Dev Dependencies
1
@lit-labs/cli-localize
Powers the lit localize command.
Don't use this directly, but install @lit-labs/cli and run lit localize from it.
That command will load this package from the nearest node_modules directory, or offer to install it if it's not found.
No vulnerabilities found.
Reason
all last 30 commits are reviewed through GitHub
Reason
30 commit(s) out of 30 and 22 issue activity out of 30 found in the last 90 days -- score normalized to 10
Reason
no vulnerabilities detected
Reason
license file detected
Details
- Info: : LICENSE:1
Reason
no binaries found in the repo
Reason
update tool detected
Details
- Info: Dependabot detected
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'force pushes' disabled on branch 'main'
- Info: 'allow deletion' disabled on branch 'main'
- Info: status check found to merge onto on branch 'main'
- Warn: number of required reviewers is only 1 on branch 'main'
Reason
dependency not pinned by hash detected -- score normalized to 7
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-image.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-image.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-image.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-image.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce-ie11.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce-ie11.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/sauce-ie11.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/sauce.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/starter-kits.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/starter-kits.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/starter-kits.yaml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: packages/benchmarks/generator/scripts/generate.sh:11
- Info: Dockerfile dependencies are pinned
- Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles
- Info: no insecure (not pinned by hash) dependency downloads found in shell scripts
Reason
no badge detected
Reason
non read-only tokens detected in GitHub workflows
Details
- Warn: no topLevel permission defined: .github/workflows/add-issues-to-project.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/add-issues-to-project.yml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/benchmarks.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/release-image.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/release.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/sauce-ie11.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/sauce.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/starter-kits.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/tests.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=permissions
Reason
dangerous workflow patterns detected
Details
- Warn: script injection with untrusted input ' github.event.pull_request.body ': .github/workflows/release-image.yaml:36
Reason
security policy file not detected
Reason
project is not fuzzed
Score
6
/10
Last Scanned on 2022-08-15
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More