npmpackage.info

Gathering detailed insights and metrics for @lowdefy/actions-core

@lowdefy/actions-core - 4.4.0 | npmpackage.info

@lowdefy/actions-core

The config web stack for business apps - build internal tools, client portals, web apps, admin panels, dashboards, web sites, and CRUD apps with YAML or JSON.

4.4.0

2,831

NOASSERTION

JavaScript

31.23 kB

4.6

Installations

npm install @lowdefy/actions-core

Developer Guide

BETA

Typescript

No

Module System

ESM

Node Version

20.18.1

NPM Version

10.8.2 Pull Requests

Open

11

Total

1,244

Closed

67

Merged

1,166

Issues

Open

30

Total

280

Closed

250

Releases

190

v4.4.0

Updated on Dec 06, 2024

v4.3.0

Updated on Jul 31, 2024

v4.2.2

Updated on Jul 17, 2024

v4.2.1

Updated on Jul 04, 2024

v4.1.0

Updated on Apr 22, 2024

v4.0.2

Updated on Feb 28, 2024

View All 190 releases

Languages

JavaScript

HTML

Less

Nunjucks

TypeScript

Shell

Dockerfile

JavaScript (94.77%)

HTML (2.39%)

Less (2.01%)

Nunjucks (0.41%)

TypeScript (0.38%)

Shell (0.02%)

Dockerfile (0.02%)

Developer

lowdefy

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

NOASSERTION License

2,831 Stars

5,836 Commits

176 Forks

30 Watchers

38 Branches

22 Contributors

Updated on Jul 08, 2025

Maintainers

View All 22 Contributors

Package Meta Information

Latest Version

4.4.0

Package Id

@lowdefy/actions-core@4.4.0

Unpacked Size

31.23 kB

Size

6.97 kB

File Count

NPM Version

10.8.2

Node Version

20.18.1

Published on

Dec 06, 2024

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@lowdefy/helpers

Dev Dependencies

@jest/globals @swc/cli @swc/core @swc/jest jest jest-environment-jsdom

Lowdefy Actions Core

Core Lowdefy actions

Signed-Releases

Determines if the project cryptographically signs release artifacts.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-branches.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/test-branches.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-branches.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/test-branches.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-branches.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/test-branches.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-branches.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/test-branches.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-pulls.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/test-pulls.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-pulls.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/test-pulls.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-pulls.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/test-pulls.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-pulls.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/lowdefy/lowdefy/test-pulls.yml/main?enable=pin
Warn: containerImage not pinned by hash: packages/cli/src/commands/init-docker/Dockerfile:1
Warn: containerImage not pinned by hash: packages/cli/src/commands/init-docker/Dockerfile:15
Info: 0 out of 6 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 7 third-party GitHubAction dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

41 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-m5vv-6r4h-3vj9
Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-xwcq-pm8m-c4vf
Warn: Project is vulnerable to: GHSA-gx9m-whjm-85jf
Warn: Project is vulnerable to: GHSA-mmhx-hmjr-r674
Warn: Project is vulnerable to: GHSA-vhxf-7vqr-mrjg
Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-hhhv-q57g-882q
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-gp8f-8m3g-qvj9
Warn: Project is vulnerable to: GHSA-7m27-7ghc-44w9
Warn: Project is vulnerable to: GHSA-f82v-jwr5-mffw
Warn: Project is vulnerable to: GHSA-fr5h-rqp8-mj6g
Warn: Project is vulnerable to: GHSA-g77x-44xx-532m
Warn: Project is vulnerable to: GHSA-7gfc-8cq8-jh5f
Warn: Project is vulnerable to: GHSA-qpjv-v59x-3qc4
Warn: Project is vulnerable to: GHSA-3h52-269p-cp9r
Warn: Project is vulnerable to: GHSA-9h6g-pr28-7cqp
Warn: Project is vulnerable to: GHSA-x7hr-w5r2-h6wg
Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx
Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc

Score

4.6

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More