Gathering detailed insights and metrics for @luigi-project/plugin-auth-oidc
Gathering detailed insights and metrics for @luigi-project/plugin-auth-oidc
Installations
npm install @luigi-project/plugin-auth-oidcDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
20.14.0
NPM Version
10.7.0
Releases
143
Languages
8
JavaScript
Svelte
HTML
TypeScript
SCSS
Shell
CSS
Vue
JavaScript (62.34%)
Svelte (14.38%)
HTML (10.02%)
TypeScript (8.74%)
SCSS (2.49%)
Shell (1.65%)
CSS (0.35%)
Vue (0.05%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
Apache-2.0 License
872 Stars
2,450 Commits
178 Forks
18 Watchers
26 Branches
63 Contributors
Updated on Jul 11, 2025
Maintainers
2
Package Meta Information
Latest Version
2.22.1
Package Id
@luigi-project/plugin-auth-oidc@2.22.1
Unpacked Size
300.02 kB
Size
77.54 kB
File Count
6
NPM Version
10.7.0
Node Version
20.14.0
Published on
May 23, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
No dependencies detected.
Luigi
Description
Luigi is a micro frontend JavaScript framework that enables you to create an administrative user interface driven by local and distributed views. Luigi allows a web application to communicate with the micro frontends which the application contains. To make sure the communication runs smoothly, you can easily configure the settings such as routing, navigation, authorization, and user experience elements.
Luigi consists of Luigi Core application and Luigi Client libraries. They establish secure communication between the core application and the micro frontend using postMessage API.
Read the Getting started guide to learn more about micro frontends and the structure of Luigi.
Requirements
Luigi can run on any operating system and there are no specific requirements for installing it.
Download and installation
Follow the instructions in this document to install Luigi Core. Read this document to install the Luigi Client.
Usage
Examples
View the application examples to explore Luigi's features.
Go to the Luigi Fiddle site to see Luigi in action and configure a sample application.
Documentation
For details, see Luigi documentation.
Development
Development guidelines for micro frontend developers
For security reasons, follow these guidelines when developing a micro frontend:
- Make the micro frontend accessible only through HTTPS.
- Add Content Security Policies (CSPs).
- Make the Access-Control-Allow-Origin HTTP header as restrictive as possible.
- Maintain an allowlist with trusted domains and compare it with the origin of the Luigi Core application. The origin will be passed when you call the init listener in your micro frontend. Stop further processing if the origin does not match.
NOTE: Luigi follows these sandbox rules for iframes.
Code formatting for contributors
All projects in the repository use Prettier to format source code. Run the npm install command in the root folder to install it along with husky, the Git hooks manager. Both tools ensure proper codebase formatting before committing it.
Unit tests
To ensure that existing features still work as expected after your changes, run unit tests using the npm run test command in the core folder.
E2E tests
To ensure that existing features still work as expected after your changes, you need to run UI tests from the Angular example application. Before running the tests, you need to start our two test applications:
- Start the Angular example application by using the
npm startcommand in the application folder. - Start the js test application by using the
npm run devcommand in the application folder.
Once the applications are ready:
- Run
npm run e2e:openin the test/e2e-test-application folder to start tests in the interactive mode. - Run
npm run e2e:runin the test/e2e-test-application folder to start tests in the headless browser.
Backward compatibility tests
Use these tests to ensure that applications written for previous versions of Luigi still work after Luigi gets updated with npm. Before running the tests, bundle Luigi by running npm run bundle in the main repository folder.
Install jq using the brew install jq command. It is required for the script to work, however, you can omit it if the command you are using to run your tests is tagged latest.
- Run
npm run test:compatibilityin the main repository folder to start regression testing. The system will prompt you to select the previous version. - Run
npm run test:compatibility -- --tag latestin the main repository folder to start regression testing with the last version preselected. - On the CI, run
npm run test:compatibility -- --install --tag latestin the main repository folder to install dependencies, bundle Luigi and run the tests with the last version preselected.
How to obtain support
If you have further questions about Luigi, you can check the GitHub Discussions page or contact us on our Slack channel. If you find a specific problem or bug, you can also open a GitHub issue on our repository. Please describe the problem and the steps to reproduce it in your issue.
Contributing
Please refer to the CONTRIBUTING.md file in this repository for instructions on how to contribute to Luigi.
Licensing
Please see our LICENSE for copyright and license information. Detailed information including third-party components and their licensing/copyright information is available via the REUSE tool.
No vulnerabilities found.
Reason
30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/luigi-project/.github/SECURITY.md:1
- Info: Found linked content: github.com/luigi-project/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/luigi-project/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/luigi-project/.github/SECURITY.md:1
Reason
dependency not pinned by hash detected -- score normalized to 2
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auth-oidc-pkce-plugin-release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/auth-oidc-pkce-plugin-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auth-oidc-pkce-plugin-release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/auth-oidc-pkce-plugin-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auth-oidc-pkce-plugin-release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/auth-oidc-pkce-plugin-release.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/checkmarx.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/checkmarx.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code_checks.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/code_checks.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/code_checks.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/code_checks.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compatibility.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/compatibility.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compatibility.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/compatibility.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compatibility.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/compatibility.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-coverage.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/container-coverage.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-coverage.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/container-coverage.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-coverage.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/container-coverage.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/container-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/container-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/container-release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/container-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/luigi-client-support-angular-release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/luigi-client-support-angular-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/luigi-client-support-angular-release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/luigi-client-support-angular-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/luigi-client-support-angular-release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/luigi-client-support-angular-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/luigi-client-support-ui5-release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/luigi-client-support-ui5-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/luigi-client-support-ui5-release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/luigi-client-support-ui5-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/luigi-client-support-ui5-release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/luigi-client-support-ui5-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mend.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/mend.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mend.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/mend.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/mend.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/mend.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/nightly-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/nightly-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-release.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/nightly-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prepare.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/prepare.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prepare.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/prepare.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prepare.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/prepare.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_cra.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/publish_cra.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish_cra.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/publish_cra.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rc-release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/rc-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rc-release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/rc-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rc-release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/rc-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/setupScripts.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/setupScripts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/setupScripts.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/setupScripts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/setupScripts.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/setupScripts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/setupScripts.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/setupScripts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/setupScripts.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/setupScripts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/setupScripts.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/setupScripts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/setupScripts.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/setupScripts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/setupScripts.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/setupScripts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/setupScripts.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/setupScripts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/setupScripts.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/setupScripts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/luigi-project/luigi/test.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: scripts/setup/angular.sh:17
- Warn: npmCommand not pinned by hash: scripts/setup/no-framework.sh:20
- Warn: npmCommand not pinned by hash: scripts/setup/openui5.sh:46
- Warn: npmCommand not pinned by hash: scripts/setup/react.sh:19
- Warn: npmCommand not pinned by hash: scripts/setup/react.sh:20
- Warn: npmCommand not pinned by hash: scripts/setup/react.sh:71
- Warn: npmCommand not pinned by hash: scripts/setup/vue.sh:24
- Warn: npmCommand not pinned by hash: scripts/shared/bashHelpers.sh:34
- Warn: npmCommand not pinned by hash: scripts/testCompatibility.sh:188
- Warn: npmCommand not pinned by hash: test/setuptests.sh:46
- Warn: npmCommand not pinned by hash: website/landingpage/build.sh:6
- Warn: npmCommand not pinned by hash: .github/workflows/code_checks.yml:24
- Warn: npmCommand not pinned by hash: .github/workflows/container-coverage.yml:24
- Warn: npmCommand not pinned by hash: .github/workflows/container-coverage.yml:27
- Warn: npmCommand not pinned by hash: .github/workflows/mend.yml:29
- Warn: npmCommand not pinned by hash: .github/workflows/mend.yml:30
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:55
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:56
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:118
- Info: 0 out of 63 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
- Info: 10 out of 29 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/auth-oidc-pkce-plugin-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/checkmarx.yml:1
- Warn: no topLevel permission defined: .github/workflows/code_checks.yml:1
- Warn: no topLevel permission defined: .github/workflows/compatibility.yml:1
- Warn: no topLevel permission defined: .github/workflows/container-coverage.yml:1
- Warn: no topLevel permission defined: .github/workflows/container-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/luigi-client-support-angular-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/luigi-client-support-ui5-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/mend.yml:1
- Warn: no topLevel permission defined: .github/workflows/nightly-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/prepare.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish_cra.yml:1
- Warn: no topLevel permission defined: .github/workflows/rc-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/release.yml:1
- Warn: no topLevel permission defined: .github/workflows/setupScripts.yml:1
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
29 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-7q7g-4xm8-89cq
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-6pq3-928q-x6w6
- Warn: Project is vulnerable to: GHSA-7qgg-vw88-cc99
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-whgm-jr23-g3j9
- Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695
- Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm
- Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574
- Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9
- Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
- Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
- Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
- Warn: Project is vulnerable to: GHSA-qhv9-728r-6jqg
- Warn: Project is vulnerable to: GHSA-g7q5-pjjr-gqvp
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-g3ch-rx76-35fx
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Score
5.7
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More