npmpackage.info

Gathering detailed insights and metrics for @startupjs/babel-plugin-startupjs-plugins

@startupjs/babel-plugin-startupjs-plugins - 0.55.8 | npmpackage.info

@startupjs/babel-plugin-startupjs-plugins

⚡ Universal React Native + Web framework with isomorphic collaborative DB and observables

0.55.8

107

JavaScript

7.66 kB

2.3

Installations

npm install @startupjs/babel-plugin-startupjs-plugins

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

21.1.0

NPM Version

lerna/3.22.1/node@v21.1.0+arm64 (darwin)

Pull Requests

Open

25

Total

1,168

Closed

139

Merged

1,004

Issues

Open

101

Total

124

Closed

23

Releases

v0.21.1 (April 23, 2020)

v0.21.1

Updated on Apr 23, 2020

v0.21.0 (April 21, 2020)

v0.21.0

Updated on Apr 22, 2020

v0.20.0 (April 20, 2020)

v0.20.0

Updated on Apr 22, 2020

v0.19.3 (April 18, 2020)

v0.19.3

Updated on Apr 22, 2020

v0.19.2 (April 18, 2020)

v0.19.2

Updated on Apr 22, 2020

v0.19.1 (April 17, 2020)

v0.19.1

Updated on Apr 17, 2020

View All 19 releases

Languages

JavaScript

MDX

Shell

Stylus

TypeScript

Java

Objective-C

Dockerfile

CSS

HTML

Ruby

Starlark

Swift

JavaScript (58.86%)

MDX (32.68%)

Shell (3.42%)

Stylus (2.92%)

TypeScript (1.01%)

Java (0.3%)

Objective-C (0.3%)

Dockerfile (0.21%)

CSS (0.15%)

HTML (0.07%)

Ruby (0.04%)

Starlark (0.03%)

Developer

startupjs

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

107 Stars

4,202 Commits

48 Forks

10 Watchers

93 Branches

59 Contributors

Updated on May 29, 2025

Maintainers

View All 59 Contributors

Package Meta Information

Latest Version

0.55.8

Package Id

@startupjs/babel-plugin-startupjs-plugins@0.55.8

Unpacked Size

7.66 kB

Size

3.05 kB

File Count

NPM Version

lerna/3.22.1/node@v21.1.0+arm64 (darwin)

Node Version

21.1.0

Published on

Dec 16, 2023

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@babel/helper-module-imports

Dev Dependencies

babel-plugin-tester jest

@startupjs/babel-plugin-startupjs-plugins

Gather startupjs modules and plugins together with their options to be feed into registry.

Example

1import plugins from 'startupjs/plugins'

↓ ↓ ↓ ↓ ↓ ↓

1import module1 from '/path/to/module-1'
2import plugin1Isomorphic from '/path/to/startupjs-plugin-1/isomorphic'
3import plugin1Server from '/path/to/startupjs-plugin-1/server'
4import plugin1ServerConfig from '/startupjs.config/startupjs-plugin-1/server'
5const plugins = [
6  {
7    type: 'module',
8    name: 'module-1'
9  },
10  {
11    type: 'plugin',
12    name: 'startupjs-plugin-1',
13    for: 'startupjs',
14    inits: [
15      {
16        env: 'isomorphic',
17        init: plugin1Isomorphic,
18        config: {}
19      },
20      {
21        env: 'server',
22        init: plugin1Server,
23        config: plugin1ServerConfig
24      },
25    ]
26  }
27]

Licence

MIT

No vulnerabilities found.

10

Packaging

Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.

9

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

8

Maintained

Determines if the project is "actively maintained".

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

License

Determines if the project has defined a license.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy-styleguide.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/deploy-styleguide.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-deploy-aks.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-deploy-aks.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-deploy-aks.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-deploy-aks.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-deploy-aks.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-deploy-aks.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-deploy-aks.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-deploy-aks.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-deploy-eks.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-deploy-eks.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-deploy-eks.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-deploy-eks.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-deploy-eks.yaml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-deploy-eks.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-deploy-eks.yaml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-deploy-eks.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-dev.yaml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-dev.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-dev.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-dev.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-dev.yaml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-dev.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-dev.yaml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-dev.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-dev.yaml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-dev.yaml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-dev.yaml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/publish-dev.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-tests.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/run-tests.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-tests.yaml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/run-tests.yaml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/run-tests.yaml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/startupjs/startupjs/run-tests.yaml/master?enable=pin
Warn: containerImage not pinned by hash: docker/deploy-aks/Dockerfile:13
Warn: containerImage not pinned by hash: docker/deploy-aks/Dockerfile:16: pin your Docker image by updating mcr.microsoft.com/azure-cli:2.59.0 to mcr.microsoft.com/azure-cli:2.59.0@sha256:eb21a975e39a46f49b86ab517ea2916e146560c7844d0c488cf85eee8a38398d
Warn: containerImage not pinned by hash: docker/deploy-eks/Dockerfile:13
Warn: containerImage not pinned by hash: docker/deploy-eks/Dockerfile:16: pin your Docker image by updating robertd/alpine-aws-cdk to robertd/alpine-aws-cdk@sha256:daccf2d55e6da612ed11e59248395cc1defadf3683a0aaa971801b4f88490d76
Warn: containerImage not pinned by hash: docker/deploy/Dockerfile:1: pin your Docker image by updating google/cloud-sdk to google/cloud-sdk@sha256:99c8977b5214a2c7da1cd0a77910f37bfbc7d8c3737446b886a5c058706c4c7c
Warn: containerImage not pinned by hash: docker/deploy/helpers/Dockerfile:1: pin your Docker image by updating node:21.2-alpine to node:21.2-alpine@sha256:5fc1d095e47286b0859342a7b8a90b1c3adf2c283f12c6542a5456c1f2955218
Warn: containerImage not pinned by hash: docker/dev/Dockerfile:1: pin your Docker image by updating node:21.2-alpine to node:21.2-alpine@sha256:5fc1d095e47286b0859342a7b8a90b1c3adf2c283f12c6542a5456c1f2955218
Warn: containerImage not pinned by hash: styleguide/Dockerfile:1: pin your Docker image by updating node:21.2-alpine to node:21.2-alpine@sha256:5fc1d095e47286b0859342a7b8a90b1c3adf2c283f12c6542a5456c1f2955218
Warn: npmCommand not pinned by hash: docker/dev/docker-entrypoint.sh:5
Warn: npmCommand not pinned by hash: scripts/tasks.sh:34
Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 11 third-party GitHubAction dependencies pinned
Info: 0 out of 8 containerImage dependencies pinned
Info: 0 out of 2 npmCommand dependencies pinned

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

42 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-4g6q-77j7-vvjc
Warn: Project is vulnerable to: GHSA-7v5v-9h63-cj86
Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-wm7h-9275-46v2
Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-8cf7-32gw-wr33
Warn: Project is vulnerable to: GHSA-hjrf-2m68-5959
Warn: Project is vulnerable to: GHSA-qwph-4952-7xr6
Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
Warn: Project is vulnerable to: GHSA-qrpm-p2h7-hrv2
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5
Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp
Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq
Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr
Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765
Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g
Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
Warn: Project is vulnerable to: GHSA-x7hr-w5r2-h6wg
Warn: Project is vulnerable to: GHSA-h755-8qp9-cq85
Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc

Score

2.3

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More