Gathering detailed insights and metrics for @payloadcms/plugin-form-builder
Gathering detailed insights and metrics for @payloadcms/plugin-form-builder
Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.
Installations
npm install @payloadcms/plugin-form-builderDeveloper Guide
BETA
Typescript
Yes
Module System
ESM
Node Version
23.11.0
NPM Version
10.9.2
Releases
515
Languages
7
TypeScript
SCSS
JavaScript
Dockerfile
CSS
MDX
Shell
TypeScript (95.59%)
SCSS (2.96%)
JavaScript (1.18%)
Dockerfile (0.13%)
CSS (0.11%)
MDX (0.02%)
Shell (0.01%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
36,196 Stars
13,798 Commits
2,667 Forks
139 Watchers
344 Branches
406 Contributors
Updated on Jul 11, 2025
Maintainers
9
Package Meta Information
Latest Version
3.47.0
Package Id
@payloadcms/plugin-form-builder@3.47.0
Unpacked Size
181.32 kB
Size
40.34 kB
File Count
113
NPM Version
10.9.2
Node Version
23.11.0
Published on
Jul 11, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
2
Payload Form Builder Plugin
A plugin for Payload to easily allow admin editors to build and manage forms within the admin panel.
No vulnerabilities found.
Reason
30 commit(s) and 6 issue activity found in the last 90 days -- score normalized to 10
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Info: FSF or OSI recognized license: MIT License: LICENSE.md:0
Reason
no binaries found in the repo
Reason
Found 29/30 approved changesets -- score normalized to 9
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Warn: One or no descriptive hints of disclosure, vulnerability, and/or timelines in security policy
- Info: Found text in security policy: SECURITY.md:1
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'main'
- Info: 'force pushes' disabled on branch 'main'
- Warn: 'branch protection settings apply to administrators' is disabled on branch 'main'
- Warn: required approving review count is 1 on branch 'main'
- Warn: codeowners review is not required on branch 'main'
- Info: status check found to merge onto on branch 'main'
- Info: PRs are required in order to make changes on branch 'main'
Reason
dependency not pinned by hash detected -- score normalized to 1
Details
- Info: Possibly incomplete results: error parsing shell code: invalid parameter name: .github/workflows/stale.yml:51
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dispatch-event.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/dispatch-event.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/dispatch-event.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/dispatch-event.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/label-on-change.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/label-on-change.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/label-on-change.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/label-on-change.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/label-on-change.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/label-on-change.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/label-on-change.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/label-on-change.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock-issues.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/lock-issues.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:203: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:215: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:224: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:328: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:340: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:358: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:377: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:465: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:477: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:495: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:514: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:571: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:583: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:589: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:610: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:615: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:636: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:671: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:683: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/main.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/main.yml:124: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/main.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-release-templates.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/post-release-templates.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-release-templates.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/post-release-templates.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-release-templates.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/post-release-templates.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-release-templates.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/post-release-templates.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-release-templates.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/post-release-templates.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-release.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/post-release.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/post-release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/post-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/post-release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/post-release.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-title.yml:119: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/pr-title.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-title.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/pr-title.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-title.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/pr-title.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-title.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/pr-title.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-prerelease.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/publish-prerelease.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/stale.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/triage.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/triage.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/triage.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/triage.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/triage.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/payloadcms/payload/triage.yml/main?enable=pin
- Warn: containerImage not pinned by hash: examples/astro/payload/Dockerfile:3
- Warn: containerImage not pinned by hash: examples/astro/payload/Dockerfile:6
- Warn: containerImage not pinned by hash: examples/astro/payload/Dockerfile:22
- Warn: containerImage not pinned by hash: examples/astro/payload/Dockerfile:40
- Warn: containerImage not pinned by hash: examples/localization/Dockerfile:1
- Warn: containerImage not pinned by hash: examples/localization/Dockerfile:3
- Warn: containerImage not pinned by hash: examples/localization/Dockerfile:12
- Warn: containerImage not pinned by hash: examples/remix/payload/Dockerfile:3
- Warn: containerImage not pinned by hash: examples/remix/payload/Dockerfile:6
- Warn: containerImage not pinned by hash: examples/remix/payload/Dockerfile:22
- Warn: containerImage not pinned by hash: examples/remix/payload/Dockerfile:40
- Warn: containerImage not pinned by hash: templates/_template/Dockerfile:4
- Warn: containerImage not pinned by hash: templates/_template/Dockerfile:7
- Warn: containerImage not pinned by hash: templates/_template/Dockerfile:23
- Warn: containerImage not pinned by hash: templates/_template/Dockerfile:41
- Warn: containerImage not pinned by hash: templates/blank/Dockerfile:4
- Warn: containerImage not pinned by hash: templates/blank/Dockerfile:7
- Warn: containerImage not pinned by hash: templates/blank/Dockerfile:23
- Warn: containerImage not pinned by hash: templates/blank/Dockerfile:41
- Warn: containerImage not pinned by hash: templates/website/Dockerfile:4
- Warn: containerImage not pinned by hash: templates/website/Dockerfile:7
- Warn: containerImage not pinned by hash: templates/website/Dockerfile:23
- Warn: containerImage not pinned by hash: templates/website/Dockerfile:41
- Warn: containerImage not pinned by hash: templates/with-payload-cloud/Dockerfile:3
- Warn: containerImage not pinned by hash: templates/with-payload-cloud/Dockerfile:6
- Warn: containerImage not pinned by hash: templates/with-payload-cloud/Dockerfile:22
- Warn: containerImage not pinned by hash: templates/with-payload-cloud/Dockerfile:40
- Warn: containerImage not pinned by hash: templates/with-postgres/Dockerfile:4
- Warn: containerImage not pinned by hash: templates/with-postgres/Dockerfile:7
- Warn: containerImage not pinned by hash: templates/with-postgres/Dockerfile:23
- Warn: containerImage not pinned by hash: templates/with-postgres/Dockerfile:41
- Warn: containerImage not pinned by hash: templates/with-vercel-mongodb/Dockerfile:4
- Warn: containerImage not pinned by hash: templates/with-vercel-mongodb/Dockerfile:7
- Warn: containerImage not pinned by hash: templates/with-vercel-mongodb/Dockerfile:23
- Warn: containerImage not pinned by hash: templates/with-vercel-mongodb/Dockerfile:41
- Warn: containerImage not pinned by hash: templates/with-vercel-postgres/Dockerfile:4
- Warn: containerImage not pinned by hash: templates/with-vercel-postgres/Dockerfile:7
- Warn: containerImage not pinned by hash: templates/with-vercel-postgres/Dockerfile:23
- Warn: containerImage not pinned by hash: templates/with-vercel-postgres/Dockerfile:41
- Warn: containerImage not pinned by hash: templates/with-vercel-website/Dockerfile:4
- Warn: containerImage not pinned by hash: templates/with-vercel-website/Dockerfile:7
- Warn: containerImage not pinned by hash: templates/with-vercel-website/Dockerfile:23
- Warn: containerImage not pinned by hash: templates/with-vercel-website/Dockerfile:41
- Info: 0 out of 35 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 17 third-party GitHubAction dependencies pinned
- Info: 0 out of 43 containerImage dependencies pinned
- Info: 10 out of 10 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dangerous workflow patterns detected
Details
- Warn: untrusted code checkout '${{ github.event.pull_request.base.ref }}': .github/workflows/triage.yml:93
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/main.yml:29
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/post-release-templates.yml:51
- Warn: no topLevel permission defined: .github/workflows/dispatch-event.yml:1
- Warn: no topLevel permission defined: .github/workflows/label-on-change.yml:1
- Warn: no topLevel permission defined: .github/workflows/main.yml:1
- Warn: no topLevel permission defined: .github/workflows/post-release-templates.yml:1
- Warn: no topLevel permission defined: .github/workflows/post-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-prerelease.yml:1
- Warn: no topLevel permission defined: .github/workflows/stale.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/triage.yml:15
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 29 are checked with a SAST tool
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
44 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
- Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
- Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975
- Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-m5qc-5hw7-8vg7
- Warn: Project is vulnerable to: GHSA-vg7j-7cwx-8wgw
- Warn: Project is vulnerable to: GHSA-7m27-7ghc-44w9
- Warn: Project is vulnerable to: GHSA-qpjv-v59x-3qc4
- Warn: Project is vulnerable to: GHSA-67rr-84xm-4c7r
- Warn: Project is vulnerable to: GHSA-3h52-269p-cp9r
- Warn: Project is vulnerable to: GHSA-f82v-jwr5-mffw
- Warn: Project is vulnerable to: GHSA-x7hr-w5r2-h6wg
- Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx
- Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
- Warn: Project is vulnerable to: GHSA-vg6x-rcgg-rjx6
- Warn: Project is vulnerable to: GHSA-x574-m823-4x7w
- Warn: Project is vulnerable to: GHSA-4r4m-qw57-chr8
- Warn: Project is vulnerable to: GHSA-xcj6-pq6g-qj4x
- Warn: Project is vulnerable to: GHSA-356w-63v5-8wf4
- Warn: Project is vulnerable to: GHSA-859w-5945-r5v3
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-m7xq-9374-9rvx
- Warn: Project is vulnerable to: GHSA-r2fc-ccr8-96c4
- Warn: Project is vulnerable to: GHSA-4q56-crqp-v477
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-f7f6-9jq7-3rqj
- Warn: Project is vulnerable to: GHSA-r5w7-f542-q2j4
- Warn: Project is vulnerable to: GHSA-223j-4rm8-mrmf
Score
4.4
/10
Last Scanned on 2025-06-30
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More