npmpackage.info

Gathering detailed insights and metrics for @morphism/runtime

@morphism/runtime - 0.1.9 | npmpackage.info

@morphism/runtime

0.1.9

MIT

TypeScript

13.84 kB

1.7

Installations

npm install @morphism/runtime

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

14.17.6

NPM Version

lerna/3.22.1/node@v14.17.6+arm64 (darwin)

Score

68.6

Supply Chain

83.3

Quality

78.1

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

14

Total

29

Closed

13

Merged

2

Issues

Open

1

Total

1

Closed

0

Releases

Unable to fetch releases

Languages

TypeScript

JavaScript

TypeScript (94.92%)

JavaScript (5.08%)

Developer

morphism-org

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

88 Commits

21 Branches

2 Contributors

Updated on Apr 28, 2022

Maintainers

View All 2 Contributors

Package Meta Information

Latest Version

0.1.9

Package Id

@morphism/runtime@0.1.9

Unpacked Size

13.84 kB

Size

4.42 kB

File Count

NPM Version

lerna/3.22.1/node@v14.17.6+arm64 (darwin)

Node Version

14.17.6

Total Downloads

Cumulative downloads

Total Downloads

NaN

Peer Dependencies

@morphism/fp fp-ts io-ts io-ts-types

Dev Dependencies

@morphism/fp @types/node @typescript-eslint/eslint-plugin @typescript-eslint/parser eslint eslint-config-prettier eslint-plugin-functional fp-ts io-ts io-ts-types prettier ts-node typescript

@morphism/runtime

A combination of io-ts and io-ts-types, exported under a namespace called Runtime, that acts as an all-in-one input/output validation library.

Examples

If we have an endpoint that accepts a payload of the following shape:

1{
2  username: string;
3  hoursWorked: string;
4  isOvertime?: string;
5  date: number
6}

and, after parsing/validation, needs to be transformed to:

1{
2  username: string;
3  hoursWorked: number;
4  isOvertime: boolean;
5  date: Date
6}

where

username is a required parameter that we want a special error message for
isOvertime is an optional argument we want to fill with a default value when it isn't provided
date is a UNIX epoch representing a Date
hoursWorked is just some number

Then we could use @morphism/runtime to describe the above logic like so:

1import { Runtime } from "@morphism/runtime";
2
3type Request = Runtime.ToType<typeof runtime>;
4namespace Request {
5  export const runtime = () =>
6    Runtime.strict({
7      username: Runtime.withMessage(
8        Runtime.string(),
9        () => 'Some special error message for just username'
10      ),
11      hoursWorked: Runtime.numberFromString(),
12      isOvertime: Runtime.withFallback(Runtime.booleanFromString(), false),
13      dateRange: Runtime.dateFromUnixTime(),
14    });
15}

Request now represents the shape our Request.runtime function validates, and can be used like so:

1pipe(
2  input,
3  Request.runtime().decode,
4  Either.fold(
5    (errors: Runtime.Errors) => ...,
6    (request: Request) => ...
7  )
8)

No vulnerabilities found.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

SAST

Determines if the project uses static code analysis.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

51 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-w8qv-6jwh-64r5
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
Warn: Project is vulnerable to: GHSA-ww39-953v-wcq6
Warn: Project is vulnerable to: GHSA-765h-qjxv-5f44
Warn: Project is vulnerable to: GHSA-f2jv-r9rf-7988
Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
Warn: Project is vulnerable to: GHSA-4p35-cfcx-8653
Warn: Project is vulnerable to: GHSA-7f3x-x4pr-wqhj
Warn: Project is vulnerable to: GHSA-jpp7-7chh-cf67
Warn: Project is vulnerable to: GHSA-q6wq-5p59-983w
Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-vx3p-948g-6vhq
Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw
Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc
Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-jgrx-mgxx-jf9v
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
Warn: Project is vulnerable to: GHSA-38fc-wpqx-33j7
Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Warn: Project is vulnerable to: GHSA-mpwj-fcr6-x34c

Score

1.7

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

@morphism/runtime

Installations

Developer Guide

Yes

CommonJS

14.17.6

lerna/3.22.1/node@v14.17.6+arm64 (darwin)

Score

Pull Requests

14

29

13

2

Issues

1

1

0

Releases

Unable to fetch releases

Languages

Developer

morphism-org

Download Statistics

GitHub Statistics

Maintainers

Package Meta Information

Total Downloads

NaN

Peer Dependencies

Dev Dependencies

@morphism/runtime

Examples

10

10

0

0

0

0

0

0

0

0

1.7

/10

Weekly Downloads

Monthly Downloads

Yearly Downloads