Gathering detailed insights and metrics for @marcelofns/ngx-graph
Gathering detailed insights and metrics for @marcelofns/ngx-graph
Installations
npm install @marcelofns/ngx-graphDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
7.2.0
NPM Version
5.6.0
Releases
Unable to fetch releases
Languages
6
TypeScript
MDX
HTML
JavaScript
CSS
SCSS
TypeScript (74.42%)
MDX (17.37%)
HTML (5.79%)
JavaScript (0.98%)
CSS (0.97%)
SCSS (0.47%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
972 Stars
343 Commits
296 Forks
55 Watchers
51 Branches
41 Contributors
Updated on Jul 03, 2025
Maintainers
1
Package Meta Information
Latest Version
4.3.3
Package Id
@marcelofns/ngx-graph@4.3.3
Unpacked Size
3.13 MB
Size
581.58 kB
File Count
91
NPM Version
5.6.0
Node Version
7.2.0
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
7
Peer Dependencies
4
Dev Dependencies
69
@angular/animations@angular/common@angular/compiler@angular/compiler-cli@angular/core@angular/forms@angular/platform-browser@angular/platform-browser-dynamic@angular/platform-server@swimlane/prettier-config-swimlane@types/core-js@types/d3-selection@types/d3-shape@types/jasmine@types/nodeangular2-template-loaderautoprefixerawesome-typescript-loaderclean-webpack-plugincodelyzercopy-webpack-plugincore-jscpxcross-envcss-loaderextract-text-webpack-pluginfile-loaderfs-extragh-pageshtml-loaderhtml-webpack-pluginistanbul-instrumenter-loaderjasmine-corekarmakarma-chrome-launcherkarma-coveragekarma-jasminekarma-mocha-reporterkarma-remap-coveragekarma-sourcemap-loaderkarma-webpacknode-sassnpm-run-allpostcsspostcss-loaderprettierraw-loaderreplacerimrafrxjssass-loadersource-map-loaderstyle-loaderto-string-loaderts-helperstslibtslinttslint-config-prettiertslint-config-swimlanetslint-loadertypescriptuglify-jsurl-loaderwebpackwebpack-combine-loaderswebpack-dev-serverwebpack-mergewebpack-notifierzone.js
ngx-graph
This is only a custom package of ngx-graph to support panning on mobile devices (touch events).
Please go to: https://github.com/swimlane/ngx-graph
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
Found 18/20 approved changesets -- score normalized to 9
Reason
10 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 8
Reason
SAST tool is not run on all commits -- score normalized to 5
Details
- Warn: 14 commits out of 28 are checked with a SAST tool
Reason
7 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
- Warn: Project is vulnerable to: GHSA-8mmm-9v2q-x3f9
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/swimlane/ngx-graph/stale.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_and_deploy.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/swimlane/ngx-graph/test_and_deploy.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test_and_deploy.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/swimlane/ngx-graph/test_and_deploy.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test_and_deploy.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/swimlane/ngx-graph/test_and_deploy.yml/master?enable=pin
- Info: 0 out of 3 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/stale.yml:1
- Warn: no topLevel permission defined: .github/workflows/test_and_deploy.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
5.9
/10
Last Scanned on 2025-06-30
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More