Gathering detailed insights and metrics for @semantic-release/gitlab-config
Gathering detailed insights and metrics for @semantic-release/gitlab-config
Installations
npm install @semantic-release/gitlab-configDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Min. Node Version
>=20.8.1
Node Version
20.11.1
NPM Version
10.5.0
Score
31.6
Supply Chain
55.8
Quality
77.1
Maintenance
100
Vulnerability
95.6
License
Releases
24
Contributors
14
Unable to fetch Contributors
Languages
1
JavaScript
JavaScript (100%)
Love this project? Help keep it running — sponsor us today! 🚀
Developer
semantic-release
Download Statistics
Total Downloads
2,672,991
Last Day
2,247
Last Week
12,057
Last Month
56,024
Last Year
541,864
GitHub Statistics
MIT License
54 Stars
376 Commits
19 Forks
8 Watchers
2 Branches
14 Contributors
Updated on Feb 09, 2025
Bundle Size
294.00 B
Minified
197.00 B
Minified + Gzipped
Maintainers
4
Package Meta Information
Latest Version
14.0.1
Package Id
@semantic-release/gitlab-config@14.0.1
Unpacked Size
4.48 kB
Size
1.90 kB
File Count
4
NPM Version
10.5.0
Node Version
20.11.1
Published on
Mar 24, 2024
Total Downloads
Cumulative downloads
Total Downloads
2,672,991
Last Day
5.3%
2,247
Compared to previous day
Last Week
-0.9%
12,057
Compared to previous week
Last Month
64.1%
56,024
Compared to previous month
Last Year
-17.5%
541,864
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
4
Peer Dependencies
1
Dev Dependencies
2
@semantic-release/gitlab-config
semantic-release shareable config to publish npm packages with GitLab.
Plugins
This shareable configuration use the following plugins:
@semantic-release/commit-analyzer@semantic-release/release-notes-generator@semantic-release/npm@semantic-release/gitlab
Install
1$ npm install --save-dev semantic-release @semantic-release/gitlab-config
Usage
The shareable config can be configured in the semantic-release configuration file:
1{ 2 "extends": "@semantic-release/gitlab-config" 3}
Configuration
See each plugin documentation for required installation and configuration steps.
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
no dangerous workflow patterns detected
Reason
19 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
all dependencies are pinned
Details
- Info: 6 out of 6 GitHub-owned GitHubAction dependencies pinned
- Info: 3 out of 3 npmCommand dependencies pinned
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/semantic-release/.github/.github/SECURITY.md:1
- Info: Found linked content: github.com/semantic-release/.github/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/semantic-release/.github/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/semantic-release/.github/.github/SECURITY.md:1
Reason
packaging workflow detected
Details
- Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:12
Reason
0 existing vulnerabilities detected
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yml:10
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Score
7.1
/10
Last Scanned on 2025-02-03
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More