Gathering detailed insights and metrics for @open-rpc/schema-utils-js
Gathering detailed insights and metrics for @open-rpc/schema-utils-js
Installations
npm install @open-rpc/schema-utils-jsScore
57.3
Supply Chain
73.4
Quality
86
Maintenance
100
Vulnerability
99.6
License
Developer
open-rpc
Developer Guide
BETA
Module System
CommonJS, UMD
Min. Node Version
Typescript Support
Yes
Node Version
20.12.1
NPM Version
10.9.0
Statistics
20 Stars
972 Commits
17 Forks
8 Watching
46 Branches
11 Contributors
Updated on 08 Oct 2024
Bundle Size
179.51 kB
Minified
44.01 kB
Minified + Gzipped
Languages
TypeScript (99.19%)
JavaScript (0.81%)
Total Downloads
Cumulative downloads
Total Downloads
956,138
Last day
-8.6%
5,395
Compared to previous day
Last week
16.4%
25,453
Compared to previous week
Last month
-12.6%
100,007
Compared to previous month
Last year
313.5%
619,287
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
10
Versions
OpenRPC Utils For Javascript
See developer documentation here: https://open-rpc.github.io/schema-utils-js/
Need help or have a question? Join us on Discord!
Contributing
How to contribute, build and release are outlined in CONTRIBUTING.md, BUILDING.md and RELEASING.md respectively. Commits in this repository follow the CONVENTIONAL_COMMITS.md specification.
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE.md:0
Reason
7 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 6
Reason
6 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Reason
Found 3/16 approved changesets -- score normalized to 1
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/lint.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/open-rpc/schema-utils-js/lint.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/open-rpc/schema-utils-js/lint.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/lint.yml:16
- Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 25 are checked with a SAST tool
Score
3.9
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More