Gathering detailed insights and metrics for @maxmind/geoip2-node
Gathering detailed insights and metrics for @maxmind/geoip2-node
Node.js API for GeoIP2 webservice client and database reader
Installations
npm install @maxmind/geoip2-nodeDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Node Version
20.10.0
NPM Version
10.2.3
Score
98
Supply Chain
99.1
Quality
81.5
Maintenance
100
Vulnerability
98.9
License
Releases
34
Contributors
46
Unable to fetch Contributors
Languages
3
TypeScript
JavaScript
Shell
TypeScript (96.53%)
JavaScript (2.07%)
Shell (1.4%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
226 Stars
1,983 Commits
25 Forks
19 Watching
16 Branches
46 Contributors
Maintainers
5
Package Meta Information
Latest Version
5.0.0
Package Id
@maxmind/geoip2-node@5.0.0
Unpacked Size
58.12 kB
Size
15.37 kB
File Count
41
NPM Version
10.2.3
Node Version
20.10.0
Publised On
05 Dec 2023
Total Downloads
Cumulative downloads
Total Downloads
0
Last day
0%
0
Compared to previous day
Last week
0%
0
Compared to previous week
Last month
0%
0
Compared to previous month
Last year
0%
0
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Versions
Steps for releasing:
- Review open issues and PRs to see if any can easily be fixed, closed, or merged.
- Bump copyright year in
README.md, if necessary. - Review
CHANGELOG.mdfor completeness and correctness. Update its release date. - Set the new version in
package.json. - Create a release PR containing the updates relating to any of the steps above.
- Ensure that the release PR is merged into
main. - With
mainchecked out, runnpm publish. This will generate the docs, deploy the docs, and publish the package to NPM. - Verify the release on NPM.
- Tag the release, e.g.
git tag -a v1.2.3 -m v1.2.3 - Push the tag:
git push --tags - Create the release on GitHub. You can use the web interface.
Set up pre-commit hooks
npm run setup to install husky pre-commit hooks
No vulnerabilities found.
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0
Reason
SAST tool is run on all commits
Details
- Info: SAST configuration detected: CodeQL
- Info: all commits (30) are checked with a SAST tool
Reason
0 existing vulnerabilities detected
Reason
dependency not pinned by hash detected -- score normalized to 3
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/maxmind/GeoIP2-node/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/maxmind/GeoIP2-node/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/maxmind/GeoIP2-node/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/maxmind/GeoIP2-node/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/maxmind/GeoIP2-node/lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/maxmind/GeoIP2-node/lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/maxmind/GeoIP2-node/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/maxmind/GeoIP2-node/test.yml/main?enable=pin
- Warn: downloadThenRun not pinned by hash: bin/install-precious:17
- Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned
- Info: 4 out of 4 npmCommand dependencies pinned
- Info: 0 out of 1 downloadThenRun dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1
- Warn: no topLevel permission defined: .github/workflows/lint.yml:1
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
6.8
/10
Last Scanned on 2024-12-16
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More