npmpackage.info

Approximately 800 new packages are uploaded to the npm registry every day. This number can vary, but it reflects the active and growing nature of the JavaScript development community.

@napi-rs/triples

A framework for building compiled Node.js add-ons in Rust via Node-API

1.2.0

5,874

NOASSERTION

Rust

85,196,758

5.7

Installations

npm install @napi-rs/triples

Score

100

Supply Chain Risk

90.1

Quality

Maintenance

100

Vulnerability

Pull Requests

Open

5

Total

1,560

Closed

130

Merged

1,425

Issues

Open

180

Total

605

Closed

425

Releases

355

napi-derive@2.16.11

Published on 10 Aug 2024

napi@2.16.9

Published on 10 Aug 2024

napi-derive@2.16.10

Published on 23 Jul 2024

napi-derive@3.0.0-alpha.7

Published on 23 Jul 2024

napi-derive@2.16.9

Published on 16 Jul 2024

napi-derive@3.0.0-alpha.6

Published on 16 Jul 2024

View all 355 releases

Contributors

116

View all 116 contributors

Developer

napi-rs

Statistics

5,874 Stars

2,791 Commits

259 Forks

26 Watching

14 Branches

116 Contributors

Updated on 10 Sept 2024

Languages

Rust (74.64%)

TypeScript (20.69%)

JavaScript (3.99%)

Dockerfile (0.68%)

Total Downloads

Cumulative downloads

Total Downloads

85,196,758

Last day

35.7%

27,527

Compared to previous day

Last week

10%

152,107

Compared to previous week

Last month

-2.8%

595,328

Compared to previous month

Last year

-49%

11,082,120

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Versions

napi-rs

This project was initialized from xray

A framework for building compiled Node.js add-ons in Rust via Node-API. Website: https://napi.rs

Platform Support

MSRV

Rust 1.65.0

	node12	node14	node16	node18	node20
Windows x64	✓	✓	✓	✓	✓
Windows x86	✓	✓	✓	✓	✓
Windows arm64	✓	✓	✓	✓	✓
macOS x64	✓	✓	✓	✓	✓
macOS aarch64	✓	✓	✓	✓	✓
Linux x64 gnu	✓	✓	✓	✓	✓
Linux x64 musl	✓	✓	✓	✓	✓
Linux aarch64 gnu	✓	✓	✓	✓	✓
Linux aarch64 musl	✓	✓	✓	✓	✓
Linux arm gnueabihf	✓	✓	✓	✓	✓
Linux arm muslebihf	✓	✓	✓	✓	✓
Linux powerpc64le gnu	✓	✓	✓	✓	✓
Linux s390x gnu	✓	✓	✓	✓	✓
Linux riscv64 gnu	N/A	N/A	✓	✓	✓
Linux aarch64 android	✓	✓	✓	✓	✓
Linux armv7 android	✓	✓	✓	✓	✓
FreeBSD x64	✓	✓	✓	✓	✓

This library depends on Node-API and requires Node@10.0.0 or later.

We already have some packages written by napi-rs: node-rs

One nice feature is that this crate allows you to build add-ons purely with the Rust/JavaScript toolchain and without involving node-gyp.

Taste

You can start from package-template to play with napi-rs

Define JavaScript functions

/// import the preludes
use napi::bindgen_prelude::*;
use napi_derive::napi;

/// module registration is done by the runtime, no need to explicitly do it now.
#[napi]
fn fibonacci(n: u32) -> u32 {
  match n {
    1 | 2 => 1,
    _ => fibonacci(n - 1) + fibonacci(n - 2),
  }
}

/// use `Fn`, `FnMut` or `FnOnce` traits to defined JavaScript callbacks
/// the return type of callbacks can only be `Result`.
#[napi]
fn get_cwd<T: Fn(String) -> Result<()>>(callback: T) {
  callback(env::current_dir().unwrap().to_string_lossy().to_string()).unwrap();
}

/// or, define the callback signature in where clause
#[napi]
fn test_callback<T>(callback: T)
where T: Fn(String) -> Result<()>
{}

/// async fn, require `async` feature enabled.
/// [dependencies]
/// napi = {version="2", features=["async"]}
#[napi]
async fn read_file_async(path: String) -> Result<Buffer> {
  tokio::fs::read(path)
    .map(|r| match r {
      Ok(content) => Ok(content.into()),
      Err(e) => Err(Error::new(
        Status::GenericFailure,
        format!("failed to read file, {}", e),
      )),
    })
    .await
}

more examples at examples

Building

This repository is a Cargo crate. Any napi-based add-on should contain Cargo.toml to make it a Cargo crate.

In your Cargo.toml you need to set the crate-type to "cdylib" so that cargo builds a C-style shared library that can be dynamically loaded by the Node executable. You'll also need to add this crate as a dependency.

[package]
name = "awesome"

[lib]
crate-type = ["cdylib"]

[dependencies]
napi = "3"
napi-derive = "3"

[build-dependencies]
napi-build = "1"

And create build.rs in your own project:

// build.rs
extern crate napi_build;

fn main() {
  napi_build::setup();
}

So far, the napi build script has only been tested on macOS Linux Windows x64 MSVC and FreeBSD.

Install the @napi-rs/cli to help you build your Rust codes and copy Dynamic lib file to .node file in case you can require it in your program.

{
  "package": "awesome-package",
  "devDependencies": {
    "@napi-rs/cli": "^1.0.0"
  },
  "napi": {
    "name": "jarvis" // <----------- Config the name of native addon, or the napi command will use the name of `Cargo.toml` for the binary file name.
  },
  "scripts": {
    "build": "napi build --release",
    "build:debug": "napi build"
  }
}

Then you can require your native binding:

require('./jarvis.node')

The module_name would be your package name in your Cargo.toml.

xxx => ./xxx.node

xxx-yyy => ./xxx_yyy.node

You can also copy Dynamic lib file to an appointed location:

napi build [--release] ./dll
napi build [--release] ./artifacts

There are documents which contains more details about the @napi-rs/cli usage.

Testing

Because libraries that depend on this crate must be loaded into a Node executable in order to resolve symbols, all tests are written in JavaScript in the test_module subdirectory.

To run tests:

yarn build:test
yarn test

Related projects

Features table

Rust Type	Node Type	NAPI Version	Minimal Node version	Enable by `napi` feature
u32	Number	1	v8.0.0
i32/i64	Number	1	v8.0.0
f64	Number	1	v8.0.0
bool	Boolean	1	v8.0.0
String/&'a str	String	1	v8.0.0
Latin1String	String	1	v8.0.0	latin1
UTF16String	String	1	v8.0.0
Object	Object	1	v8.0.0
serde_json::Map	Object	1	v8.0.0	serde-json
serde_json::Value	any	1	v8.0.0	serde-json
Array	Array	1	v8.0.0
Vec	Array	1	v8.0.0
Buffer	Buffer	1	v8.0.0
External	External	1	v8.0.0
Null	null	1	v8.0.0
Undefined/()	undefined	1	v8.0.0
Result<()>	Error	1	v8.0.0
T: Fn(...) -> Result	Function	1	v8.0.0
Async/Future	Promise	4	v10.6.0	async
AsyncTask	Promise	1	v8.5.0
JsGlobal	global	1	v8.0.0
JsSymbol	Symbol	1	v8.0.0
Int8Array/Uint8Array ...	TypedArray	1	v8.0.0
JsFunction	threadsafe function	4	v10.6.0	napi4
BigInt	BigInt	6	v10.7.0	napi6

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/asan.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/asan.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/asan.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/asan.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/asan.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/asan.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/asan.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/asan.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/bench.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/bench.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/bench.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/bench.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/bench.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/bench.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/bench.yaml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/bench.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/bench.yaml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/bench.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yaml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yaml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yaml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:76: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docker.yaml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:133: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker.yaml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/docker.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/memory-test.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/memory-test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/memory-test.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/memory-test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/memory-test.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/memory-test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/memory-test.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/memory-test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/memory-test.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/memory-test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:128: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:131: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:143: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:303: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:306: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:312: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:318: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:336: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:340: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:366: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:369: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:381: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:390: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:399: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:403: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:491: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:494: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:500: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:506: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:525: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:594: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:596: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:601: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:606: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:200: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:255: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:261: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:267: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:454: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:457: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:461: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:465: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:475: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:535: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:538: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:544: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:549: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:579: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:582: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:635: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:636: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:640: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test-release.yaml:645: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:650: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:674: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-release.yaml:675: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/test-release.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zig.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zig.yaml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/zig.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zig.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/zig.yaml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zig.yaml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zig.yaml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zig.yaml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zig.yaml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zig.yaml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/zig.yaml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/zig.yaml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/zig.yaml:144: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/zig.yaml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/napi-rs/napi-rs/zig.yaml/main?enable=pin
Warn: containerImage not pinned by hash: alpine-zig.Dockerfile:1: pin your Docker image by updating ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine to ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-alpine@sha256:c271b91a477acfde85b991757bfffd3359c29403f28b9218a60e44fe9a57733e
Warn: containerImage not pinned by hash: alpine.Dockerfile:1: pin your Docker image by updating node:18-alpine to node:18-alpine@sha256:17514b20acef0e79691285e7a59f3ae561f7a1702a9adc72a515aef23f326729
Warn: containerImage not pinned by hash: debian-aarch64.Dockerfile:1: pin your Docker image by updating messense/manylinux2014-cross:aarch64 to messense/manylinux2014-cross:aarch64@sha256:a237466f57e58ab481132eb94e44c03c03f9dd23093960fd91b22ff7bca0bc54
Warn: containerImage not pinned by hash: debian-zig.Dockerfile:1: pin your Docker image by updating ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-debian to ghcr.io/napi-rs/napi-rs/nodejs-rust:lts-debian@sha256:c44d63d56ad0c8015af0f74d870a3e6d6307d3032251d85c5d5f7525e283e92f
Warn: containerImage not pinned by hash: debian.Dockerfile:1: pin your Docker image by updating messense/manylinux2014-cross:x86_64 to messense/manylinux2014-cross:x86_64@sha256:a3c10e604513db73c97c0bef96a609c9635cbd7bc8bf11df3ba7e37ff5fc2eaf
Warn: downloadThenRun not pinned by hash: debian-aarch64.Dockerfile:17-45
Warn: npmCommand not pinned by hash: debian-aarch64.Dockerfile:17-45
Warn: downloadThenRun not pinned by hash: debian.Dockerfile:14-42
Warn: npmCommand not pinned by hash: debian.Dockerfile:14-42
Info: 0 out of 62 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 43 third-party GitHubAction dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned
Info: 0 out of 5 containerImage dependencies pinned
Info: 0 out of 2 downloadThenRun dependencies pinned

0

SAST

Determines if the project uses static code analysis.

Score

5.7

/10

Last Scanned on 2024-09-02

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More