npmpackage.info

Gathering detailed insights and metrics for @malept/cross-spawn-promise

@malept/cross-spawn-promise

A promisified version of cross-spawn with slightly different behavior & extra options.

2.0.0

Apache-2.0

TypeScript

3.12 kB

86,324,936 3.7

Installations

npm install @malept/cross-spawn-promise

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Min. Node Version

>= 12.13.0

Node Version

12.22.1

NPM Version

6.14.12 Score

98.3

Supply Chain

73.1

Quality

75.1

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

8

Total

231

Closed

151

Merged

72

Issues

Open

2

Total

2

Closed

0

Releases

2.0.0

v2.0.0

Published on 02 Jul 2021

1.1.1

v1.1.1

Published on 05 Dec 2020

1.1.0

v1.1.0

Published on 29 Mar 2020

1.0.0

v1.0.0

Published on 13 Feb 2020

View all 4 releases

Contributors

Unable to fetch Contributors

View all 1 contributors

Languages

TypeScript

Shell

TypeScript (99.09%)

Shell (0.91%)

Love this project? Help keep it running — sponsor us today! 🚀

Developer

malept

Download Statistics

Total Downloads

86,324,936

Last Day

134,397

Last Week

779,348

Last Month

3,112,873

Last Year

30,019,453

GitHub Statistics

2 Stars

114 Commits

2 Forks

2 Watching

9 Branches

1 Contributors

Bundle Size

7.77 kB

Minified

3.12 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://github.com/sponsors/malept https://tidelift.com/subscription/pkg/npm-.malept-cross-spawn-promise?utm_medium=referral&utm_source=npm_fund

Maintainers

Package Meta Information

Latest Version

2.0.0

Package Id

@malept/cross-spawn-promise@2.0.0

Size

7.92 kB

NPM Version

6.14.12

Node Version

12.22.1

Publised On

02 Jul 2021

Total Downloads

Cumulative downloads

Total Downloads

86,324,936

Last day

22%

134,397

Compared to previous day

Last week

12.4%

779,348

Compared to previous week

Last month

30%

3,112,873

Compared to previous month

Last year

14.1%

30,019,453

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Versions

`@malept/cross-spawn-promise`

A promisified version of cross-spawn with slightly different behavior & extra options.

Different Behavior

If the spawned process exits with a non-zero code, an ExitCodeError is thrown with the original command, code, stdout, and stderr as properties.

If the spawned process is terminated by a signal on non-Windows platforms, an ExitSignalError is thrown with the original command, signal name, stdout, and stderr as properties.

Extra Options

logger: a Function such as console.log or debug(name) to log some information about the spawned process.
updateErrorCallback: a callback which mutates the error before it is re-thrown. Most commonly, this is used to augment the error message of ENOENT error to provide a more human-friendly message as to how to install the missing executable.

Legal

This module is licensed under the Apache 2.0 license.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

10

License

Determines if the project has defined a license.

3

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/malept/cross-spawn-promise/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/malept/cross-spawn-promise/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/malept/cross-spawn-promise/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/malept/cross-spawn-promise/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/malept/cross-spawn-promise/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/malept/cross-spawn-promise/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/malept/cross-spawn-promise/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/malept/cross-spawn-promise/docs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/malept/cross-spawn-promise/docs.yml/main?enable=pin
Info: 0 out of 6 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

3.7

/10

Last Scanned on 2025-02-03

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

@malept/cross-spawn-promise

Installations

Developer Guide

No

CommonJS

>= 12.13.0

12.22.1

6.14.12

Score

Pull Requests

8

231

151

72

Issues

2

2

0

Releases

Contributors

Unable to fetch Contributors

Languages

Developer

Download Statistics

GitHub Statistics

Bundle Size

7.77 kB

3.12 kB

Sponsor this package

Maintainers

Package Meta Information

Total Downloads

86,324,936

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

@malept/cross-spawn-promise

Different Behavior

Extra Options

Legal

10

10

10

10

3

0

0

0

0

0

0

0

0

3.7

/10

`@malept/cross-spawn-promise`