Installations
npm install @tarojs/plugin-terserDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
10.21.0
NPM Version
6.14.4
Score
39.1
Supply Chain
29.5
Quality
74
Maintenance
50
Vulnerability
96.1
License
Releases
186
chore(release): publish 4.0.9
v4.0.9
Published on 13 Jan 2025
chore(release): publish 4.0.8
v4.0.8
Published on 02 Dec 2024
chore(release): publish 4.0.7
v4.0.7
Published on 25 Oct 2024
chore(release): publish 4.0.6
v4.0.6
Published on 23 Sept 2024
Chore/release 4.0.5
v4.0.5
Published on 26 Aug 2024
chore(release): publish 3.6.35
v3.6.35
Published on 23 Aug 2024
Contributors
577
Languages
11
TypeScript
JavaScript
SCSS
Rust
HTML
CSS
Vue
Less
Sass
Stylus
Shell
TypeScript (53.46%)
JavaScript (41.77%)
SCSS (2.44%)
Rust (1.93%)
HTML (0.2%)
CSS (0.19%)
Vue (0.01%)
Developer
Download Statistics
Total Downloads
26,491
Last Day
5
Last Week
31
Last Month
118
Last Year
1,907
GitHub Statistics
35,966 Stars
14,058 Commits
4,815 Forks
693 Watching
97 Branches
577 Contributors
Maintainers
2
Package Meta Information
Latest Version
2.2.10
Package Id
@tarojs/plugin-terser@2.2.10
Unpacked Size
3.91 kB
Size
1.46 kB
File Count
4
NPM Version
6.14.4
Node Version
10.21.0
Total Downloads
Cumulative downloads
Total Downloads
26,491
Last day
25%
5
Compared to previous day
Last week
3.3%
31
Compared to previous week
Last month
-31.8%
118
Compared to previous month
Last year
-11.5%
1,907
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
5
Versions
👽 Taro['tɑ:roʊ]，泰罗·奥特曼，宇宙警备队总教官，实力最强的奥特曼。
目录
简介
开放式跨端跨框架解决方案，支持使用 React/Vue/Nerv 等框架来开发微信/京东/百度/支付宝/字节跳动/ QQ 小程序/H5/React Native 等应用。现如今市面上端的形态多种多样，Web、React Native、微信小程序等各种端大行其道，当业务要求同时在不同的端都要求有所表现的时候，针对不同的端去编写多套代码的成本显然非常高，这时候只编写一套代码就能够适配到多端的能力就显得极为需要
版本迁移
Taro 1/2 迁移至 Taro 3，请阅读《Taro 版本升级权威指南》
学习资源
社区共享
UI 库
| 名称 | 地址 | 介绍 | 支持的框架 | 支持的 Taro 版本 |
|---|---|---|---|---|
| taro-ui | https://taro-ui.jd.com/#/ | 一套基于 Taro 框架开发的多端 UI 组件库 | React | Taro 1/2/3 |
| NutUI | https://nutui.jd.com/#/ | 京东风格的轻量级移动端 Vue 组件库 | Vue3 | Taro 3 |
| taroify | https://taroify.github.io/taroify.com/introduce/ | 轻量、可靠的小程序端 Taro 组件库（Vant 的 Taro 版本） | React | Taro 3 |
| @antmjs/vantui | https://antmjs.github.io/vantui/#/home | 基于有赞 VantWeapp 开发的同时支持 Taro 和 React 的 UI 库 | React | Taro 3 |
| Tard | https://tard-ui.selling.cn/ | 一套基于 Taro 框架开发的多端 React UI 组件库 | React | Taro 3 |
| duxui | https://duxapp.cn/docs/duxui/start/ | 一套能同时兼容小程序、React Native、鸿蒙、H5的移动端ui组件库 | React | Taro 4 |
项目状态
使用案例
Taro 已经投入了我们的生产环境中使用，业界也在广泛地使用 Taro 开发多端应用。
加入共建
加入 Taro 社区共建倡议
为 Taro 贡献代码
Taro 非常欢迎社区开发者为 Taro 贡献代码，在贡献之前请先阅读贡献指南。
如果你想为 Taro 实现一个重要功能，需要先撰写 RFC 文档，按照 Taro 的RFC 机制进行操作，在经过社区讨论完善后才可以进行代码的提交。
问题反馈与建议
强烈推荐阅读 《提问的智慧》、《如何向开源社区提问题》 和 《如何有效地报告 Bug》、《如何向开源项目提交无法解答的问题》，更好的问题更容易获得帮助。
特别鸣谢
 |  |  |  |
|---|---|---|---|
| nanjingboy | jsNewbee | Qiyu8 | Garfield Lee |
贡献者们
开发计划
更新日志
本项目遵从 Angular Style Commit Message Conventions，更新日志请查阅 Release。
开发交流
License
MIT License
Copyright (c) O2Team
Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
No vulnerabilities found.
Reason
all changesets reviewed
Reason
30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
packaging workflow detected
Details
- Info: Project packages its releases by way of GitHub Actions.: .github/workflows/publish.yml:71
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
binaries present in source code
Details
- Warn: binary detected: packages/taro-helper/swc-backup/swc_plugin_compile_mode.wasm:1
- Warn: binary detected: packages/taro-helper/swc-backup/swc_plugin_compile_mode_pre_process.wasm:1
- Warn: binary detected: packages/taro-helper/swc-backup/swc_plugin_define_config.wasm:1
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/dependabot-update-lockfile.yml:10
- Warn: jobLevel 'actions' permission set to 'write': .github/workflows/publish.yml:24
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish.yml:73
- Warn: jobLevel 'actions' permission set to 'write': .github/workflows/publish.yml:74
- Warn: no topLevel permission defined: .github/workflows/auto-review.yml:1
- Warn: no topLevel permission defined: .github/workflows/build-rust-binding.yml:1
- Warn: no topLevel permission defined: .github/workflows/build-rust-wasm.yml:1
- Info: topLevel permissions set to 'read-all': .github/workflows/dependabot-update-lockfile.yml:4
- Info: topLevel 'contents' permission set to 'read': .github/workflows/nodejs.yml:21
- Info: found token with 'none' permissions: .github/workflows/publish.yml:1
- Warn: no topLevel permission defined: .github/workflows/sync-components-types.yml:1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/auto-review.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/auto-review.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/auto-review.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/auto-review.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-rust-binding.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/build-rust-binding.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-rust-binding.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/build-rust-binding.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-rust-binding.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/build-rust-binding.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-rust-binding.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/build-rust-binding.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-rust-binding.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/build-rust-binding.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-rust-binding.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/build-rust-binding.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-rust-binding.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/build-rust-binding.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-rust-wasm.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/build-rust-wasm.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/build-rust-wasm.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/build-rust-wasm.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-rust-wasm.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/build-rust-wasm.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build-rust-wasm.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/build-rust-wasm.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependabot-update-lockfile.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/dependabot-update-lockfile.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependabot-update-lockfile.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/dependabot-update-lockfile.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/dependabot-update-lockfile.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/dependabot-update-lockfile.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/nodejs.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:102: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/nodejs.yml:118: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/nodejs.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/nodejs.yml:134: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/nodejs.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/nodejs.yml:150: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/nodejs.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nodejs.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/nodejs.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/publish.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/publish.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:164: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/publish.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:189: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:216: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:229: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-components-types.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/sync-components-types.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-components-types.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/sync-components-types.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-components-types.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/sync-components-types.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-components-types.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/sync-components-types.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-components-types.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/sync-components-types.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-components-types.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/NervJS/taro/sync-components-types.yml/main?enable=pin
- Info: 0 out of 26 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 18 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
112 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: RUSTSEC-2021-0139
- Warn: Project is vulnerable to: RUSTSEC-2021-0145 / GHSA-g98v-hv3f-hcfr
- Warn: Project is vulnerable to: RUSTSEC-2024-0375
- Warn: Project is vulnerable to: RUSTSEC-2020-0095
- Warn: Project is vulnerable to: RUSTSEC-2024-0421 / GHSA-h97m-ww89-6jmq
- Warn: Project is vulnerable to: RUSTSEC-2024-0019 / GHSA-r8w9-5wcg-vfj7
- Warn: Project is vulnerable to: RUSTSEC-2024-0336 / GHSA-6g7w-8wpp-frhj
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-whgm-jr23-g3j9
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx
- Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
- Warn: Project is vulnerable to: GHSA-phwq-j96m-2c2q
- Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
- Warn: Project is vulnerable to: GHSA-6h5x-7c5m-7cr7
- Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
- Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
- Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
- Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
- Warn: Project is vulnerable to: GHSA-8jmw-wjr8-2x66
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-pfq8-rq6v-vf5m
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq
- Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488
- Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
- Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5
- Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp
- Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq
- Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr
- Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765
- Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
- Warn: Project is vulnerable to: GHSA-566m-qj78-rww5
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-hwj9-h5mp-3pm3
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-w5p7-h5w8-2hfq
- Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
- Warn: Project is vulnerable to: GHSA-fhg7-m89q-25r3
- Warn: Project is vulnerable to: GHSA-hgjh-723h-mx2j
- Warn: Project is vulnerable to: GHSA-jf5r-8hm2-f872
- Warn: Project is vulnerable to: GHSA-4w2j-2rg4-5mjw
- Warn: Project is vulnerable to: GHSA-mrgp-mrhc-5jrq
- Warn: Project is vulnerable to: GHSA-7jxr-cg7f-gpgv
- Warn: Project is vulnerable to: GHSA-xj72-wvfv-8985
- Warn: Project is vulnerable to: GHSA-ch3r-j5x3-6q2m
- Warn: Project is vulnerable to: GHSA-p5gc-c584-jj6v
- Warn: Project is vulnerable to: GHSA-whpj-8f3w-67p5
- Warn: Project is vulnerable to: GHSA-cchq-frgv-rjh5
- Warn: Project is vulnerable to: GHSA-g644-9gfx-q4q4
- Warn: Project is vulnerable to: GHSA-g3ch-rx76-35fx
- Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc
- Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
- Warn: Project is vulnerable to: GHSA-c2jc-4fpr-4vhg
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986 / GHSA-64vr-g452-qvp3
- Warn: Project is vulnerable to: GHSA-hc6q-2mpp-qw7j
- Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj
- Warn: Project is vulnerable to: GHSA-3p22-ghq8-v749
- Warn: Project is vulnerable to: GHSA-77xc-hjv8-ww97
- Warn: Project is vulnerable to: GHSA-mq8j-3h7h-p8g7
- Warn: Project is vulnerable to: GHSA-p2jh-44qj-pf2v
- Warn: Project is vulnerable to: GHSA-p7v2-p9m8-qqg7
- Warn: Project is vulnerable to: GHSA-7x97-j373-85x5
- Warn: Project is vulnerable to: GHSA-7m48-wc93-9g85
- Warn: Project is vulnerable to: GHSA-qqvq-6xgj-jw8g
- Warn: Project is vulnerable to: GHSA-mpg4-rc92-vx8v
- Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j
- Warn: Project is vulnerable to: GHSA-x565-32qp-m3vf
- Warn: Project is vulnerable to: GHSA-rxrc-rgv4-jpvx
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-25hc-qcg6-38wj
- Warn: Project is vulnerable to: GHSA-cqmj-92xf-r6r9
- Warn: Project is vulnerable to: GHSA-9cwx-2883-4wfx
- Warn: Project is vulnerable to: GHSA-vg6x-rcgg-rjx6
Score
5.5
/10
Last Scanned on 2025-01-27
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More