npmpackage.info

Gathering detailed insights and metrics for @messageformat/core

@messageformat/core

ICU MessageFormat for Javascript - i18n Plural and Gender Capable Messages

3.4.0

1,685

MIT

TypeScript

33,818,068 5

Installations

npm install @messageformat/core

Pull Requests

Open

3

Total

221

Closed

43

Merged

175

Issues

Open

11

Total

213

Closed

202

Releases

messageformat@4.0.0-9

Published on 21 Nov 2024

messageformat@4.0.0-8

Published on 02 Oct 2024

@messageformat/core@3.4.0

Published on 02 Oct 2024

messageformat@4.0.0-7

Published on 28 Feb 2024

messageformat@4.0.0-6

Published on 07 Jan 2024

v4.0.0-5

messageformat@4.0.0-5

Published on 14 Nov 2023

View all 40 releases

Developer

messageformat

Developer Guide

BETA

Module System

CommonJS, UMD

Min. Node Version

Typescript Support

Yes

Node Version

22.8.0

NPM Version

10.8.2 Statistics

1,685 Stars

1,530 Commits

155 Forks

32 Watching

3 Branches

60 Contributors

Updated on 21 Nov 2024

Languages

TypeScript (94.62%)

JavaScript (4.98%)

HTML (0.34%)

EJS (0.05%)

Total Downloads

Cumulative downloads

Total Downloads

33,818,068

Last day

-10.4%

75,516

Compared to previous day

Last week

1.8%

421,223

Compared to previous week

Last month

1.6%

1,806,332

Compared to previous month

Last year

70.8%

18,784,769

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@messageformat/date-skeleton @messageformat/number-skeleton @messageformat/parser @messageformat/runtime make-plural safe-identifier

Versions

messageformat

The experience and subtlety of your program's text can be important. Messageformat is a mechanism for handling both pluralization and gender in your applications. It can also lead to much better translations, as it's designed to support all the languages included in the Unicode CLDR.

This monorepo provides packages supporting JS implementations of both ICU MessageFormat (MF1) and Unicode MessageFormat 2 (MF2):

ICU MessageFormat 1 Packages

@messageformat/cli - A command-line client for the library
@messageformat/convert - Converts other localization formats into ICU MessageFormat
@messageformat/core - The core library that transpiles MessageFormat strings into JavaScript functions
@messageformat/date-skeleton - Tools for working with ICU DateFormat skeletons
@messageformat/loader - Webpack loader for JSON, YAML, & .properties message files
@messageformat/number-skeleton - Tools for working with ICU NumberFormat skeletons
@messageformat/parser - Parses MessageFormat source strings into an AST
@messageformat/react - React hooks and other bindings for messages
@messageformat/runtime - Runtime dependencies of compiled message modules
rollup-plugin-messageformat - Rollup plugin for JSON, YAML, & .properties message files

Unicode MessageFormat 2 Packages

messageformat - (BETA) Intl.MessageFormat / MF2 parser, runtime and polyfill
@messageformat/fluent - (BETA) Compile Fluent sources into MF2 resources
@messageformat/icu-messageformat-1 - (BETA) Compile MF1 sources into MF2 formatters

Getting Started (MF1)

Depending on your situation, consult one or more of the following guides:

Alternatively, take a look at our examples or dig into the API documentation if you're looking to do something more involved.

Our Format Guide will help with the ICU MessageFormat Syntax, and the Usage Guide provides some further options for integrating messageformat to be a part of your workflow around UI texts and translations.

Messageformat is an OpenJS Foundation project, and we follow its Code of Conduct.

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

10

SAST

Determines if the project uses static code analysis.

7

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

5

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 5

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browsers.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/browsers.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browsers.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/browsers.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/browsers.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/browsers.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/docs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/docs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/nodejs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/messageformat/messageformat/nodejs.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/nodejs.yml:43
Info: 0 out of 14 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 5 out of 6 npmCommand dependencies pinned

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

Score

5

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More