npmpackage.info

Gathering detailed insights and metrics for @midwayjs/esrun

@midwayjs/esrun - 3.1.6 | npmpackage.info

@midwayjs/esrun

"Zero" Api / Type Safe / Fullstack Kit / Powerful Backend

3.1.6

689

MIT

TypeScript

13.63 kB

11,295 2.7

Installations

npm install @midwayjs/esrun

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

16.19.1

NPM Version

8.19.3 Score

54.8

Supply Chain

58.2

Quality

82.6

Maintenance

100

Vulnerability

94.1

License

Pull Requests

Open

5

Total

449

Closed

138

Merged

306

Issues

Open

7

Total

82

Closed

75

Releases

177

@midwayjs/esrun@3.1.6

Updated on Mar 21, 2023

@midwayjs/serve@3.1.6

Updated on Mar 21, 2023

@midwayjs/hooks-kit@3.1.6

Updated on Mar 21, 2023

@midwayjs/hcc@3.1.6

Updated on Mar 21, 2023

@midwayjs/test-util@3.1.6

Updated on Mar 21, 2023

@midwayjs/rpc@3.1.6

Updated on Mar 21, 2023

View All 177 releases

Languages

TypeScript

JavaScript

Shell

TypeScript (98.93%)

JavaScript (1.02%)

Shell (0.05%)

Developer

midwayjs

Download Statistics

Total Downloads

11,295

Last Day

Last Week

Last Month

Last Year

1,511

GitHub Statistics

MIT License

689 Stars

1,006 Commits

63 Forks

15 Watchers

11 Branches

24 Contributors

Updated on May 09, 2025

Bundle Size

44.85 kB

Minified

13.63 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 24 Contributors

Package Meta Information

Latest Version

3.1.6

Package Id

@midwayjs/esrun@3.1.6

Unpacked Size

4.64 kB

Size

2.03 kB

File Count

NPM Version

8.19.3

Node Version

16.19.1

Published on

Mar 21, 2023

Total Downloads

Cumulative downloads

Total Downloads

11,295

Last Day

50%

Compared to previous day

Last Week

100%

Compared to previous week

Last Month

-76.6%

Compared to previous month

Last Year

-27.9%

1,511

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@swc/core @swc-node/register tsconfig-paths

@midwayjs/rpc

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Security-Policy

Determines if the project has published a security policy.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/site.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/site.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/sync.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/sync.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/sync.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/sync.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/midwayjs/hooks/test.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/sync.yml:49
Info: 0 out of 9 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 7 third-party GitHubAction dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

50 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-h452-7996-h45h
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-xwcq-pm8m-c4vf
Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
Warn: Project is vulnerable to: GHSA-75v8-2h7p-7m2m
Warn: Project is vulnerable to: GHSA-pfq8-rq6v-vf5m
Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh
Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42
Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
Warn: Project is vulnerable to: GHSA-593f-38f6-jp5m
Warn: Project is vulnerable to: GHSA-x2rg-q646-7m2v
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-353f-5xf4-qw67
Warn: Project is vulnerable to: GHSA-c24v-8rfc-w8vw
Warn: Project is vulnerable to: GHSA-8jhw-289h-jh2g
Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986 / GHSA-64vr-g452-qvp3
Warn: Project is vulnerable to: GHSA-9cwx-2883-4wfx
Warn: Project is vulnerable to: GHSA-vg6x-rcgg-rjx6
Warn: Project is vulnerable to: GHSA-x574-m823-4x7w
Warn: Project is vulnerable to: GHSA-4r4m-qw57-chr8
Warn: Project is vulnerable to: GHSA-xcj6-pq6g-qj4x
Warn: Project is vulnerable to: GHSA-356w-63v5-8wf4
Warn: Project is vulnerable to: GHSA-859w-5945-r5v3
Warn: Project is vulnerable to: GHSA-hc6q-2mpp-qw7j
Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Warn: Project is vulnerable to: GHSA-m95q-7qp3-xv42

Score

2.7

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More