npmpackage.info

Gathering detailed insights and metrics for @schemastore/eslintrc

@schemastore/eslintrc - 0.0.8 | npmpackage.info

@schemastore/eslintrc

Publish schema files as TypeScript definitions on npm

0.0.8

GPL-3.0

TypeScript

45.01 kB

8,228 5.7

Installations

npm install @schemastore/eslintrc

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Node Version

18.16.1

NPM Version

9.7.2 Score

74.8

Supply Chain

76.3

Quality

75.5

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

1,239

Closed

193

Merged

1,046

Issues

Open

1

Total

6

Closed

5

Releases

v2.0.0

Updated on Jul 05, 2019

v1.1.0

Updated on Jul 05, 2019

View All 2 releases

Languages

TypeScript

Shell

TypeScript (97.88%)

Shell (2.12%)

Developer

ffflorian

Download Statistics

Total Downloads

8,228

Last Day

Last Week

241

Last Month

484

Last Year

1,808

GitHub Statistics

GPL-3.0 License

23 Stars

1,206 Commits

2 Forks

2 Watchers

3 Branches

1 Contributors

Updated on May 07, 2025

Maintainers

View All 1 Contributors

Package Meta Information

Latest Version

0.0.8

Package Id

@schemastore/eslintrc@0.0.8

Unpacked Size

45.01 kB

Size

9.08 kB

File Count

NPM Version

9.7.2

Node Version

18.16.1

Published on

Jun 30, 2023

Total Downloads

Cumulative downloads

Total Downloads

8,228

Last Day

233.3%

Compared to previous day

Last Week

205.1%

241

Compared to previous week

Last Month

554.1%

484

Compared to previous month

Last Year

-55.6%

1,808

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Type definitions for eslintrc

Installation

npm i @schemastore/eslintrc
yarn add @schemastore/eslintrc

Summary

This package contains type definitions for eslintrc.

Usage

1import * as eslintrc from '@schemastore/eslintrc';

Note

The definitions were auto-generated by schemastore-updater using json-schema-to-typescript.

Additional Details

Schema source
Last updated: Fri, Jun 30, 2023, 21:03:59 GMT
Dependencies: none

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

10

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

9

Security-Policy

Determines if the project has published a security policy.

9

SAST

Determines if the project uses static code analysis.

3

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 3

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_test_publish.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/ffflorian/schemastore-updater/build_test_publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_test_publish.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/ffflorian/schemastore-updater/build_test_publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build_test_publish.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/ffflorian/schemastore-updater/build_test_publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/ffflorian/schemastore-updater/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/ffflorian/schemastore-updater/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/ffflorian/schemastore-updater/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/ffflorian/schemastore-updater/codeql-analysis.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gitlab_mirror.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/ffflorian/schemastore-updater/gitlab_mirror.yml/main?enable=pin
Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned
Info: 1 out of 1 third-party GitHubAction dependencies pinned

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Fuzzing

Determines if the project uses fuzzing.

Score

5.7

/10

Last Scanned on 2025-05-05

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More