npmpackage.info

Gathering detailed insights and metrics for @stomp/stompjs

Other packages similar to @stomp/stompjs

stompjs

2.3.3

STOMP for JavaScript apps (Web browser & node.js)

@stomp/ng2-stompjs

8.0.0

Angular 6/7/8/9/10 [![Build Status](https://travis-ci.org/stomp-js/ng2-stompjs.svg?branch=master)](https://travis-ci.org/stomp-js/ng2-stompjs)

@types/stompjs

2.3.9

TypeScript definitions for stompjs

zt-stompjs

1.1.2

STOMP for JavaScript apps (Web browser & node.js)

Gathering detailed insights and metrics for @stomp/stompjs

@stomp/stompjs - 7.1.1 | npmpackage.info

@stomp/stompjs

Javascript and Typescript Stomp client for Web browsers and node.js apps

7.1.1

824

Apache-2.0

TypeScript

6.23 kB

29,984,164 4.5

Installations

npm install @stomp/stompjs

Developer Guide

BETA

Typescript

No

Module System

ESM, UMD

Node Version

22.7.0

NPM Version

10.8.2 Score

99.5

Supply Chain

100

Quality

83.1

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

6

Total

429

Closed

189

Merged

234

Issues

Open

19

Total

228

Closed

209

Releases

Unable to fetch releases

Languages

TypeScript

JavaScript

Shell

Dockerfile

TypeScript (53.28%)

JavaScript (46.07%)

Shell (0.5%)

Dockerfile (0.14%)

Developer

stomp-js

Download Statistics

Total Downloads

29,984,164

Last Day

10,819

Last Week

228,046

Last Month

916,097

Last Year

9,842,860

GitHub Statistics

Apache-2.0 License

824 Stars

768 Commits

88 Forks

16 Watchers

7 Branches

10 Contributors

Updated on May 22, 2025

Bundle Size

21.63 kB

Minified

6.23 kB

Minified + Gzipped

Bundlephobia

Maintainers

View All 10 Contributors

Package Meta Information

Latest Version

7.1.1

Package Id

@stomp/stompjs@7.1.1

Unpacked Size

415.00 kB

Size

89.50 kB

File Count

NPM Version

10.8.2

Node Version

22.7.0

Published on

Apr 06, 2025

Total Downloads

Cumulative downloads

Total Downloads

29,984,164

Last Day

-9.9%

10,819

Compared to previous day

Last Week

228,046

Compared to previous week

Last Month

-6.7%

916,097

Compared to previous month

Last Year

37.9%

9,842,860

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

@chiragrupani/karma-chromium-edge-launcher @rollup/plugin-terser @rollup/plugin-typescript jasmine karma karma-chrome-launcher karma-firefox-launcher karma-jasmine karma-safari-launcher karma-summary-reporter onchange prettier rollup text-encoding ts-loader tslint tslint-config-prettier typescript ws

STOMP.js

This library provides a STOMP over WebSocket client for Web browser and node.js applications.

Please visit https://stomp-js.github.io/ for guides, FAQs and API docs.

Introduction

This library allows you to connect to a STOMP broker over WebSocket. This library supports complete STOMP specifications including all current protocol variants. Most popular messaging brokers support STOMP and STOMP over WebSockets out-of-the-box or using plugins.

Features

Simple API to interact with the Stomp protocol
Support for v1.2, v1.1 and v1.0 of the Stomp protocol
Support for fallback options in case of WebSocket unavailable
Browser and Node.js support
Option to use STOMP over TCP
Binary payload support

Usage

Browser

1<!--
2    JSPM Generator Import Map
3    Edit URL: https://generator.jspm.io/#U2NgYGBkDM0rySzJSU1hcCguyc8t0AeTWcUO5noGega6SakliaYAYTzJAykA
4  -->
5<script type="importmap">
6  {
7    "imports": {
8      "@stomp/stompjs": "https://ga.jspm.io/npm:@stomp/stompjs@7.0.0/esm6/index.js"
9    }
10  }
11</script>
12
13<!-- ES Module Shims: Import maps polyfill for modules browsers without import maps support (all except Chrome 89+) -->
14<script
15  async
16  src="https://ga.jspm.io/npm:es-module-shims@1.5.1/dist/es-module-shims.js"
17  crossorigin="anonymous"
18></script>
19
20<script type="module">
21  import { Client } from '@stomp/stompjs';
22
23  const client = new Client({
24    brokerURL: 'ws://localhost:15674/ws',
25    onConnect: () => {
26      client.subscribe('/topic/test01', message =>
27        console.log(`Received: ${message.body}`)
28      );
29      client.publish({ destination: '/topic/test01', body: 'First Message' });
30    },
31  });
32
33  client.activate();
34</script>

NodeJS

1$ npm install @stomp/stompjs ws

1import { Client } from '@stomp/stompjs';
2
3import { WebSocket } from 'ws';
4Object.assign(global, { WebSocket });
5
6const client = new Client({
7  brokerURL: 'ws://localhost:15674/ws',
8  onConnect: () => {
9    client.subscribe('/topic/test01', message =>
10      console.log(`Received: ${message.body}`)
11    );
12    client.publish({ destination: '/topic/test01', body: 'First Message' });
13  },
14});
15
16client.activate();

Further information

The API documentation is hosted as GitHub pages for the StompJS family of libraries. You may head straight to the https://stomp-js.github.io/api-docs/latest/

This library comes with detailed usage instructions. Please find it at Usage instructions. Check out other guides at https://stomp-js.github.io/.

There is quite detailed API documentation, you should start at https://stomp-js.github.io/api-docs/latest/classes/Client.html.

Upgrading

if you were using an older version of this library, you would need to make changes to your code. Head to Upgrading.

Usage with RxJS

https://github.com/stomp-js/rx-stomp is based on this library and exposes the entire functionality offered by this library as RxJS Observables.

TypeScript definitions

The npm package includes TypeScript definitions, so there is no need to install it separately.

Change-log

Please visit Change Log.

Contributing

If you want to understand the code, develop, or contribute. Please visit How to contribute.

Authors

License

License - Apache-2.0

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

8

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

4

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 4

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-refresh.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/stomp-js/stompjs/docs-refresh.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/stomp-js/stompjs/linux.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linux.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/stomp-js/stompjs/linux.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node-js.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/stomp-js/stompjs/node-js.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node-js.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/stomp-js/stompjs/node-js.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/osx.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/stomp-js/stompjs/osx.yml/develop?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/osx.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/stomp-js/stompjs/osx.yml/develop?enable=pin
Warn: containerImage not pinned by hash: rabbitmq/Dockerfile:1: pin your Docker image by updating rabbitmq:3.10.25-alpine to rabbitmq:3.10.25-alpine@sha256:60d6ca38d9a24d8909077ca39a0f1de4b80e535a368f0949bdc0c09721751032
Warn: npmCommand not pinned by hash: bin/rx-stomp.sh:13
Warn: npmCommand not pinned by hash: .github/workflows/node-js.yml:28
Info: 0 out of 6 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 1 third-party GitHubAction dependencies pinned
Info: 0 out of 1 containerImage dependencies pinned
Info: 4 out of 6 npmCommand dependencies pinned

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

Score

4.5

/10

Last Scanned on 2025-05-19

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More