npmpackage.info

Gathering detailed insights and metrics for @taro-hooks/ahooks

@taro-hooks/ahooks

Hooks Library for Taro

2.1.0

433

MIT

TypeScript

31.94 kB

12,722 2.6

Installations

npm install @taro-hooks/ahooks

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Min. Node Version

>=12.0.0

Node Version

16.15.1

NPM Version

8.11.0 Score

68.7

Supply Chain

66.5

Quality

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

0

Total

24

Closed

9

Merged

15

Issues

Open

1

Total

47

Closed

46

Releases

taro-hooks v2.1.0

taro-hooks@2.1.0

Published on 26 Jul 2024

taro-hooks v2.0.11

taro-hooks@2.0.11

Published on 25 Apr 2024

taro-hooks v2.0.10

taro-hooks@2.0.10

Published on 14 Jan 2024

taro-hooks v2.0.9

taro-hooks-v2.0.9

Published on 14 Jan 2024

taro-hooks v2.0.8

taro-hooks@2.0.8

Published on 03 Dec 2023

taro-hooks v2.0.7

taro-hooks@2.0.7

Published on 02 Oct 2023

View all 44 releases

Contributors

Unable to fetch Contributors

View all 8 contributors

Languages

TypeScript

JavaScript

MDX

SCSS

Less

CSS

HTML

Shell

TypeScript (55.72%)

JavaScript (30.48%)

MDX (8.86%)

SCSS (3.44%)

Less (0.88%)

CSS (0.32%)

HTML (0.25%)

Shell (0.07%)

Developer

innocces

Download Statistics

Total Downloads

12,722

Last Day

Last Week

172

Last Month

750

Last Year

8,741

GitHub Statistics

433 Stars

578 Commits

36 Forks

4 Watching

6 Branches

8 Contributors

Maintainers

Package Meta Information

Latest Version

2.1.0

Package Id

@taro-hooks/ahooks@2.1.0

Unpacked Size

31.94 kB

Size

6.98 kB

File Count

NPM Version

8.11.0

Node Version

16.15.1

Publised On

25 Jul 2024

Total Downloads

Cumulative downloads

Total Downloads

12,722

Last day

19.4%

Compared to previous day

Last week

7.5%

172

Compared to previous week

Last month

2.3%

750

Compared to previous month

Last year

163.9%

8,741

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

lodash-wechat @taro-hooks/shared

Dev Dependencies

@types/node

Versions

`@taro-hooks/ahooks`

taro-hooks 分包. 用于拆分@taro-hooks/ahooks hooks.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/auto-update-qr.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/auto-update-qr.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/emoji-helper.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/emoji-helper.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gh-pages.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/gh-pages.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/gh-pages.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/gh-pages.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gh-pages.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/gh-pages.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/gh-pages.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/gh-pages.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gitguardian.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/gitguardian.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/gitguardian.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/gitguardian.yml/next?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/gitleaks.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/gitleaks.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/gitleaks.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/gitleaks.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-label.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/issue-label.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-label.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/issue-label.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-reply.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/issue-reply.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-reply.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/issue-reply.yml/next?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-welcome.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/innocces/taro-hooks/pr-welcome.yml/next?enable=pin
Info: 0 out of 4 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 11 third-party GitHubAction dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

61 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-pwfr-8pq7-x9qv
Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj
Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx
Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
Warn: Project is vulnerable to: GHSA-q9mw-68c2-j6m5
Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
Warn: Project is vulnerable to: GHSA-4q6p-r6v2-jvc5
Warn: Project is vulnerable to: GHSA-8mmm-9v2q-x3f9
Warn: Project is vulnerable to: GHSA-8jmw-wjr8-2x66
Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
Warn: Project is vulnerable to: GHSA-pfq8-rq6v-vf5m
Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-mh8j-9jvh-gjf6
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
Warn: Project is vulnerable to: GHSA-566m-qj78-rww5
Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
Warn: Project is vulnerable to: GHSA-25hc-qcg6-38wj
Warn: Project is vulnerable to: GHSA-cqmj-92xf-r6r9
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-w5p7-h5w8-2hfq
Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
Warn: Project is vulnerable to: GHSA-p5gc-c584-jj6v
Warn: Project is vulnerable to: GHSA-whpj-8f3w-67p5
Warn: Project is vulnerable to: GHSA-cchq-frgv-rjh5
Warn: Project is vulnerable to: GHSA-g644-9gfx-q4q4
Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Warn: Project is vulnerable to: GHSA-f9xv-q969-pqx4
Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp

Score

2.6

/10

Last Scanned on 2024-12-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More