Gathering detailed insights and metrics for @lit-labs/gen-manifest
Gathering detailed insights and metrics for @lit-labs/gen-manifest
Lit is a simple library for building fast, lightweight web components.
Installations
npm install @lit-labs/gen-manifestDeveloper Guide
BETA
Typescript
Yes
Module System
ESM
Min. Node Version
>=14.8.0
Node Version
20.16.0
NPM Version
10.8.1
Releases
566
lit-element@4.2.1
lit-element@4.2.1
Updated on Jul 11, 2025
@lit-labs/virtualizer@2.1.1
@lit-labs/virtualizer@2.1.1
Updated on Jul 11, 2025
@lit/react@1.0.8
@lit/react@1.0.8
Updated on Jul 11, 2025
@lit/reactive-element@2.1.1
@lit/reactive-element@2.1.1
Updated on Jul 11, 2025
@lit-labs/signals@0.1.3
@lit-labs/signals@0.1.3
Updated on Jul 11, 2025
@lit/task@1.0.3
@lit/task@1.0.3
Updated on Jul 11, 2025
Languages
6
TypeScript
JavaScript
HTML
CSS
Vue
Shell
TypeScript (58.93%)
JavaScript (38.48%)
HTML (2.19%)
CSS (0.23%)
Vue (0.17%)
Shell (0.01%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
BSD-3-Clause License
19,938 Stars
2,572 Commits
978 Forks
211 Watchers
217 Branches
194 Contributors
Updated on Jul 14, 2025
Maintainers
11
Package Meta Information
Latest Version
0.3.4
Package Id
@lit-labs/gen-manifest@0.3.4
Unpacked Size
11.78 kB
Size
3.40 kB
File Count
5
NPM Version
10.8.1
Node Version
20.16.0
Published on
Aug 05, 2024
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
4
@lit-labs/gen-manifest
Utility library for generating a Custom Elements Manifest for Lit components.
For a command-line interface to using the generator, see @lit-labs/cli.
No vulnerabilities found.
Reason
all last 30 commits are reviewed through GitHub
Reason
30 commit(s) out of 30 and 22 issue activity out of 30 found in the last 90 days -- score normalized to 10
Reason
no vulnerabilities detected
Reason
license file detected
Details
- Info: : LICENSE:1
Reason
no binaries found in the repo
Reason
update tool detected
Details
- Info: Dependabot detected
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'force pushes' disabled on branch 'main'
- Info: 'allow deletion' disabled on branch 'main'
- Info: status check found to merge onto on branch 'main'
- Warn: number of required reviewers is only 1 on branch 'main'
Reason
dependency not pinned by hash detected -- score normalized to 7
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-image.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-image.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-image.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-image.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce-ie11.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce-ie11.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/sauce-ie11.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/sauce.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/starter-kits.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/starter-kits.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/starter-kits.yaml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: packages/benchmarks/generator/scripts/generate.sh:11
- Info: Dockerfile dependencies are pinned
- Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles
- Info: no insecure (not pinned by hash) dependency downloads found in shell scripts
Reason
no badge detected
Reason
non read-only tokens detected in GitHub workflows
Details
- Warn: no topLevel permission defined: .github/workflows/add-issues-to-project.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/add-issues-to-project.yml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/benchmarks.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/release-image.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/release.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/sauce-ie11.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/sauce.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/starter-kits.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/tests.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=permissions
Reason
dangerous workflow patterns detected
Details
- Warn: script injection with untrusted input ' github.event.pull_request.body ': .github/workflows/release-image.yaml:36
Reason
security policy file not detected
Reason
project is not fuzzed
Score
6
/10
Last Scanned on 2022-08-15
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More