npmpackage.info

Gathering detailed insights and metrics for @shikijs/langs

Other packages similar to @shikijs/langs

@shikijs/langs-precompiled

2.2.0

TextMate grammars for Shiki in ESM

@shikijs/langs

A beautiful yet powerful syntax highlighter

2.2.0

10,811

MIT

TypeScript

1.33 kB

1,573,844 4.5

Installations

npm install @shikijs/langs

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Node Version

22.13.1

NPM Version

10.9.2 Score

95.8

Supply Chain

76.3

Quality

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

2

Total

429

Closed

86

Merged

341

Issues

Open

55

Total

460

Closed

405

Releases

106

v2.2.0

Published on 30 Jan 2025

v1.29.2

Published on 30 Jan 2025

v2.1.0

Published on 22 Jan 2025

v2.0.3

Published on 20 Jan 2025

v2.0.2

Published on 20 Jan 2025

v2.0.1

Published on 20 Jan 2025

View all 106 releases

Contributors

193

View all 193 contributors

Languages

TypeScript

CSS

JavaScript

HTML

TypeScript (95.22%)

CSS (3.02%)

JavaScript (1.47%)

HTML (0.3%)

Developer

shikijs

Download Statistics

Total Downloads

1,573,844

Last Day

79,293

Last Week

428,763

Last Month

1,573,844

Last Year

1,573,844

GitHub Statistics

10,811 Stars

2,408 Commits

396 Forks

21 Watching

5 Branches

193 Contributors

Bundle Size

2.98 kB

Minified

1.33 kB

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

2.2.0

Package Id

@shikijs/langs@2.2.0

Unpacked Size

7.61 MB

Size

1.21 MB

File Count

637

NPM Version

10.9.2

Node Version

22.13.1

Publised On

30 Jan 2025

Total Downloads

Cumulative downloads

Total Downloads

1,573,844

Last day

-10.3%

79,293

Compared to previous day

Last week

-12.2%

428,763

Compared to previous week

Last month

1,573,844

Compared to previous month

Last year

1,573,844

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@shikijs/types

Dev Dependencies

tm-grammars

Versions

@shikijs/langs

TextMate grammars for Shiki.

License

MIT

Fuzzing

Determines if the project uses fuzzing.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/shikijs/shiki/release.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:28
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:50
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:87
Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 5 third-party GitHubAction dependencies pinned
Info: 0 out of 3 npmCommand dependencies pinned

0

SAST

Determines if the project uses static code analysis.

Score

4.5

/10

Last Scanned on 2025-01-27

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More