Gathering detailed insights and metrics for @testcontainers/chromadb
Gathering detailed insights and metrics for @testcontainers/chromadb
Testcontainers is a NodeJS library that supports tests, providing lightweight, throwaway instances of common databases, Selenium web browsers, or anything else that can run in a Docker container.
Installations
npm install @testcontainers/chromadbDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Node Version
22.16.0
NPM Version
10.9.2
Releases
200
Languages
5
TypeScript
JavaScript
Dockerfile
Shell
Handlebars
TypeScript (97.49%)
JavaScript (1.23%)
Dockerfile (0.76%)
Shell (0.32%)
Handlebars (0.2%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
2,224 Stars
999 Commits
237 Forks
13 Watchers
16 Branches
128 Contributors
Updated on Jul 15, 2025
Maintainers
1
Package Meta Information
Latest Version
11.2.1
Package Id
@testcontainers/chromadb@11.2.1
Unpacked Size
6.42 kB
Size
2.75 kB
File Count
9
NPM Version
10.9.2
Node Version
22.16.0
Published on
Jul 07, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
Testcontainers
📖 Documentation
License
See LICENSE.
Copyright
Copyright (c) 2018 - 2025 Cristian Greco and other authors.
Contributing
See CONTRIBUTING.md for how to contribute to this repo.
See contributors for all contributors.
Join our Slack workspace | Testcontainers OSS | Testcontainers Cloud
No vulnerabilities found.
Reason
30 commit(s) and 23 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
packaging workflow detected
Details
- Info: Project packages its releases by way of GitHub Actions.: .github/workflows/npm-publish.yml:8
Reason
SAST tool is run on all commits
Details
- Info: SAST configuration detected: CodeQL
- Info: all commits (20) are checked with a SAST tool
Reason
0 existing vulnerabilities detected
Reason
Found 4/22 approved changesets -- score normalized to 1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:17
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:18
- Warn: no topLevel permission defined: .github/workflows/checks.yml:1
- Warn: no topLevel permission defined: .github/workflows/codeql-analysis.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/dependency-review.yml:5
- Warn: no topLevel permission defined: .github/workflows/npm-publish.yml:1
- Warn: no topLevel permission defined: .github/workflows/release-drafter.yml:1
- Warn: no topLevel permission defined: .github/workflows/test-template.yml:1
- Warn: no topLevel permission defined: .github/workflows/windows-test-command-dispatch.yml:1
- Warn: no topLevel permission defined: .github/workflows/windows-test.yml:1
- Info: no jobLevel write permissions found
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'main'
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/checks.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/checks.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/checks.yml:85: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/checks.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/checks.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/checks.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/codeql-analysis.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/codeql-analysis.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependency-review.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/dependency-review.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dependency-review.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/dependency-review.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/npm-publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-publish.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/npm-publish.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-drafter.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/release-drafter.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-template.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/test-template.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test-template.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/test-template.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/windows-test-command-dispatch.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/windows-test-command-dispatch.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows-test.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/windows-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows-test.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/windows-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows-test.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/windows-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows-test.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/windows-test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/windows-test.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/testcontainers/testcontainers-node/windows-test.yml/main?enable=pin
- Warn: containerImage not pinned by hash: packages/modules/arangodb/Dockerfile:1: pin your Docker image by updating arangodb:3.12.5 to arangodb:3.12.5@sha256:2553869b3ac190f04649b98750360878866899418d7a2ac38d2f36471d19046d
- Warn: containerImage not pinned by hash: packages/modules/azurecosmosdb/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/cosmosdb/linux/azure-cosmos-emulator:vnext-EN20250228 to mcr.microsoft.com/cosmosdb/linux/azure-cosmos-emulator:vnext-EN20250228@sha256:19efa5c9bcab5616903b23f73d434904dea7a28756b936df06af88ad76a0be2d
- Warn: containerImage not pinned by hash: packages/modules/azurite/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/azure-storage/azurite:3.34.0 to mcr.microsoft.com/azure-storage/azurite:3.34.0@sha256:0a47e12e3693483cef5c71f35468b91d751611f172d2f97414e9c69113b106d9
- Warn: containerImage not pinned by hash: packages/modules/cassandra/Dockerfile:1: pin your Docker image by updating cassandra:5.0.4 to cassandra:5.0.4@sha256:71687bdd98228f3ce273fc8484435f327940ce186aadc99bf63390094d0da568
- Warn: containerImage not pinned by hash: packages/modules/chromadb/Dockerfile:1: pin your Docker image by updating chromadb/chroma:1.0.15 to chromadb/chroma:1.0.15@sha256:663aa18087cd698aacc3c16c1ea0c1585be9a6392e2fd80c3086c371e2f89363
- Warn: containerImage not pinned by hash: packages/modules/clickhouse/Dockerfile:1: pin your Docker image by updating clickhouse/clickhouse-server:25.6-alpine to clickhouse/clickhouse-server:25.6-alpine@sha256:805e1d8ecf2ad4e215103befad88ba1d4ea05b9f895f84a229043280e808af2a
- Warn: containerImage not pinned by hash: packages/modules/cockroachdb/Dockerfile:1: pin your Docker image by updating cockroachdb/cockroach:v25.2.2 to cockroachdb/cockroach:v25.2.2@sha256:98765f62bd4a0aa248a5ea79f381d361fd9ee8841d90e9f6d830f5ee1ed540aa
- Warn: containerImage not pinned by hash: packages/modules/couchbase/Dockerfile:1: pin your Docker image by updating couchbase/server:7.6.6 to couchbase/server:7.6.6@sha256:be7c83d55837a2554c12155202424177873e39b040ba8e9f62d0fe0b112c3ac8
- Warn: containerImage not pinned by hash: packages/modules/elasticsearch/Dockerfile:1: pin your Docker image by updating elasticsearch:9.0.2 to elasticsearch:9.0.2@sha256:12829bb0fa8b3c6b65928868d2af0fbe67bf74aa6b92b14eca87957e9f554136
- Warn: containerImage not pinned by hash: packages/modules/etcd/Dockerfile:1: pin your Docker image by updating quay.io/coreos/etcd:v3.6.1 to quay.io/coreos/etcd:v3.6.1@sha256:fb7599852bf75233f78e18bac4113d9b5e325324ddb524e79f34b95e9b621e5f
- Warn: containerImage not pinned by hash: packages/modules/gcloud/Dockerfile:1: pin your Docker image by updating gcr.io/google.com/cloudsdktool/cloud-sdk:529.0.0-emulators to gcr.io/google.com/cloudsdktool/cloud-sdk:529.0.0-emulators@sha256:f352c2715f18b5321937d86f4b36cf77c4838b318b9df7f936a8b6c1be5d7592
- Warn: containerImage not pinned by hash: packages/modules/gcloud/Dockerfile:2: pin your Docker image by updating fsouza/fake-gcs-server:1.52.2 to fsouza/fake-gcs-server:1.52.2@sha256:d47b4cf8b87006cab8fbbecfa5f06a2a3c5722e464abddc0d107729663d40ec4
- Warn: containerImage not pinned by hash: packages/modules/gcloud/Dockerfile:3: pin your Docker image by updating ghcr.io/goccy/bigquery-emulator:0.6.6 to ghcr.io/goccy/bigquery-emulator:0.6.6@sha256:8e26a076b3eb5b4ce4d247207347b22e301fb82327afb9e4138a6fdcb637d5f7
- Warn: containerImage not pinned by hash: packages/modules/hivemq/Dockerfile:1: pin your Docker image by updating hivemq/hivemq-ce:2025.4 to hivemq/hivemq-ce:2025.4@sha256:99f88d379e34c9676904d7c2f4a21e42a5c95dbacc3bfd837a0c36cdc29bebe6
- Warn: containerImage not pinned by hash: packages/modules/k3s/Dockerfile:1: pin your Docker image by updating rancher/k3s:v1.33.2-k3s1 to rancher/k3s:v1.33.2-k3s1@sha256:d8f05b9043d136c3fb01d6cf677caaef304568b8c99bdd359b86d3d7286de1df
- Warn: containerImage not pinned by hash: packages/modules/kafka/Dockerfile:1: pin your Docker image by updating confluentinc/cp-kafka:8.0.0 to confluentinc/cp-kafka:8.0.0@sha256:9cdc8119cb39c45f0efa6da8e2220058020c7433e3ba3a3ce11a8006a18cb336
- Warn: containerImage not pinned by hash: packages/modules/kafka/test-certs/Dockerfile:1: pin your Docker image by updating openjdk:8-slim to openjdk:8-slim@sha256:19578a1e13b7a1e4cab9b227fb7b5d80e14665cf4024c6407d72ba89842a97ed
- Warn: containerImage not pinned by hash: packages/modules/kurrentdb/Dockerfile:1: pin your Docker image by updating kurrentplatform/kurrentdb:25.0 to kurrentplatform/kurrentdb:25.0@sha256:af944b9868f0fd64e5d4b7b1e4bcd725153684a831368088117b2cc2045b770c
- Warn: containerImage not pinned by hash: packages/modules/localstack/Dockerfile:1: pin your Docker image by updating localstack/localstack:4.6.0 to localstack/localstack:4.6.0@sha256:5a97e0f9917a3f0d9630bb13b9d8ccf10cbe52f33252807d3b4e21418cc21348
- Warn: containerImage not pinned by hash: packages/modules/mariadb/Dockerfile:1: pin your Docker image by updating mariadb:11.8.2 to mariadb:11.8.2@sha256:1e4ec03d1b73af8e7a63137b8ef4820ac7d54c654a1e99eb76235f210f7f0a06
- Warn: containerImage not pinned by hash: packages/modules/minio/Dockerfile:1: pin your Docker image by updating minio/minio:RELEASE.2024-12-13T22-19-12Z to minio/minio:RELEASE.2024-12-13T22-19-12Z@sha256:149fdd73108553247ceee85fc65466f51034bd6e145d6e0c0e415167f5f1274f
- Warn: containerImage not pinned by hash: packages/modules/mockserver/Dockerfile:1: pin your Docker image by updating mockserver/mockserver:5.15.0 to mockserver/mockserver:5.15.0@sha256:0f9ef78c94894ac3e70135d156193b25e23872575d58e2228344964273b4af6b
- Warn: containerImage not pinned by hash: packages/modules/mongodb/Dockerfile:1: pin your Docker image by updating mongo:8.0.11 to mongo:8.0.11@sha256:f331890607b5cdce091da9823f91ab1e4c54d31fd572282037880b2eaafff454
- Warn: containerImage not pinned by hash: packages/modules/mssqlserver/Dockerfile:1: pin your Docker image by updating mcr.microsoft.com/mssql/server:2022-CU13-ubuntu-22.04 to mcr.microsoft.com/mssql/server:2022-CU13-ubuntu-22.04@sha256:c4369c38385eba011c10906dc8892425831275bb035d5ce69656da8e29de50d8
- Warn: containerImage not pinned by hash: packages/modules/mysql/Dockerfile:1: pin your Docker image by updating mysql:9.3.0 to mysql:9.3.0@sha256:297f5ead7043a440ce84b3b0f3b77430a4f233c2578ff15fff8f0de54f67f22d
- Warn: containerImage not pinned by hash: packages/modules/nats/Dockerfile:1: pin your Docker image by updating nats:2.11.6-alpine to nats:2.11.6-alpine@sha256:c6beb2ccb1910ecaead46588e2f37422c2e3922c7a0cb1930234429579c8443e
- Warn: containerImage not pinned by hash: packages/modules/neo4j/Dockerfile:1: pin your Docker image by updating neo4j:5.26.8 to neo4j:5.26.8@sha256:5216b8f7bcca893448d5b4a809d91761609fc8aea900691d59531ada76c28c62
- Warn: containerImage not pinned by hash: packages/modules/ollama/Dockerfile:1: pin your Docker image by updating ollama/ollama:0.9.5 to ollama/ollama:0.9.5@sha256:64fcc2a7c48ae920f5317264031d86414e30417269631822858c6d23f61100b0
- Warn: containerImage not pinned by hash: packages/modules/postgresql/Dockerfile:1: pin your Docker image by updating postgres:17.5-alpine to postgres:17.5-alpine@sha256:fbe21607052bb5c298674f2fd8cf044a63aa3ddf50b81627f894f91f40f50bcb
- Warn: containerImage not pinned by hash: packages/modules/qdrant/Dockerfile:1: pin your Docker image by updating qdrant/qdrant:v1.14.1 to qdrant/qdrant:v1.14.1@sha256:419d72603f5346ee22ffc4606bdb7beb52fcb63077766fab678e6622ba247366
- Warn: containerImage not pinned by hash: packages/modules/rabbitmq/Dockerfile:1: pin your Docker image by updating rabbitmq:4.1.2-management-alpine to rabbitmq:4.1.2-management-alpine@sha256:2c88ac0acd4f8e3a07ea2e0bfd506a0a39a2833fd228229abc2a305ce4a908fc
- Warn: containerImage not pinned by hash: packages/modules/redis/Dockerfile:1: pin your Docker image by updating redis:8.0 to redis:8.0@sha256:a1e0a3b3a6cedd74d8ba44805b2497b93851a296f08a44962fedc03f1c490b47
- Warn: containerImage not pinned by hash: packages/modules/redpanda/Dockerfile:1: pin your Docker image by updating docker.redpanda.com/redpandadata/redpanda:v25.1.7 to docker.redpanda.com/redpandadata/redpanda:v25.1.7@sha256:b22ff89f4384e72f773aca495ade051c789f41976a78699644ba3039b9e43f84
- Warn: containerImage not pinned by hash: packages/modules/scylladb/Dockerfile:1: pin your Docker image by updating scylladb/scylla:6.2.3 to scylladb/scylla:6.2.3@sha256:a9d904089abe9a4f8b5b893ebb5b5bf8b5a1bd0dc6658921cf05f89d3712289c
- Warn: containerImage not pinned by hash: packages/modules/selenium/Dockerfile:1: pin your Docker image by updating selenium/standalone-chrome:138.0 to selenium/standalone-chrome:138.0@sha256:642d79804b8835a190b8a5dca78ba2565b2c811c318c53d98bc6c3efae0a486c
- Warn: containerImage not pinned by hash: packages/modules/toxiproxy/Dockerfile:1: pin your Docker image by updating ghcr.io/shopify/toxiproxy:2.12.0 to ghcr.io/shopify/toxiproxy:2.12.0@sha256:9378ed52a28bc50edc1350f936f518f31fa95f0d15917d6eb40b8e376d1a214e
- Warn: containerImage not pinned by hash: packages/modules/valkey/Dockerfile:1: pin your Docker image by updating valkey/valkey:8.1 to valkey/valkey:8.1@sha256:facc1d2c3462975c34e10fccb167bfa92b0e0dbd992fc282c29a61c3243afb11
- Warn: containerImage not pinned by hash: packages/modules/weaviate/Dockerfile:1: pin your Docker image by updating semitechnologies/weaviate:1.31.5 to semitechnologies/weaviate:1.31.5@sha256:e08163196a16c6dca24aab679269170a941d84a8701e0e2b095e2868d28b27ec
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker-compose/docker-compose-with-buildkit/Dockerfile:1: pin your Docker image by updating node:10-alpine to node:10-alpine@sha256:dc98dac24efd4254f75976c40bce46944697a110d06ce7fa47e7268470cf2e28
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/docker-exit-immediately/Dockerfile:1: pin your Docker image by updating alpine:3.10 to alpine:3.10@sha256:451eee8bedcb2f029756dc3e9d73bab0e7943c1ac55cff3a4861c52a0fdd3e98
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/docker-multi-stage/Dockerfile:1
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/docker-multi-stage/Dockerfile:4
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-buildargs/Dockerfile:3
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-buildkit/Dockerfile:1: pin your Docker image by updating node:10-alpine to node:10-alpine@sha256:dc98dac24efd4254f75976c40bce46944697a110d06ce7fa47e7268470cf2e28
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-custom-filename/Dockerfile-A:1: pin your Docker image by updating node:10-alpine to node:10-alpine@sha256:dc98dac24efd4254f75976c40bce46944697a110d06ce7fa47e7268470cf2e28
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-dockerignore/Dockerfile:1: pin your Docker image by updating node:10-alpine to node:10-alpine@sha256:dc98dac24efd4254f75976c40bce46944697a110d06ce7fa47e7268470cf2e28
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-health-check-with-start-period/Dockerfile:1: pin your Docker image by updating node:10-alpine to node:10-alpine@sha256:dc98dac24efd4254f75976c40bce46944697a110d06ce7fa47e7268470cf2e28
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-health-check/Dockerfile:1: pin your Docker image by updating node:10-alpine to node:10-alpine@sha256:dc98dac24efd4254f75976c40bce46944697a110d06ce7fa47e7268470cf2e28
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/docker/Dockerfile:1: pin your Docker image by updating node:10-alpine to node:10-alpine@sha256:dc98dac24efd4254f75976c40bce46944697a110d06ce7fa47e7268470cf2e28
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/dockerfile-parser/Dockerfile:1: pin your Docker image by updating node:10-alpine to node:10-alpine@sha256:dc98dac24efd4254f75976c40bce46944697a110d06ce7fa47e7268470cf2e28
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/dockerfile-parser/buildargs.Dockerfile:1
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/dockerfile-parser/multistage-duplicate.Dockerfile:1: pin your Docker image by updating node:latest to node:latest@sha256:e7db48bc35ee8d2e8d1511dfe779d78076966bd101ab074ea2858da8d59efb7f
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/dockerfile-parser/multistage-duplicate.Dockerfile:3: pin your Docker image by updating node:latest to node:latest@sha256:e7db48bc35ee8d2e8d1511dfe779d78076966bd101ab074ea2858da8d59efb7f
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/dockerfile-parser/multistage-naming.Dockerfile:1
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/dockerfile-parser/multistage-naming.Dockerfile:3
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/dockerfile-parser/multistage.Dockerfile:1: pin your Docker image by updating node:latest to node:latest@sha256:e7db48bc35ee8d2e8d1511dfe779d78076966bd101ab074ea2858da8d59efb7f
- Warn: containerImage not pinned by hash: packages/testcontainers/fixtures/docker/dockerfile-parser/multistage.Dockerfile:3: pin your Docker image by updating alpine:latest to alpine:latest@sha256:8a1f59ffb675680d47db6337b49d22281a139e9d709335b492be023728e11715
- Warn: npmCommand not pinned by hash: packages/testcontainers/fixtures/docker-compose/docker-compose-with-buildkit/Dockerfile:19-20
- Warn: npmCommand not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-buildargs/Dockerfile:11-12
- Warn: npmCommand not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-buildkit/Dockerfile:19-20
- Warn: npmCommand not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-custom-filename/Dockerfile-A:9-10
- Warn: npmCommand not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-dockerignore/Dockerfile:9-10
- Warn: npmCommand not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-health-check-with-start-period/Dockerfile:9-10
- Warn: npmCommand not pinned by hash: packages/testcontainers/fixtures/docker/docker-with-health-check/Dockerfile:9-10
- Warn: npmCommand not pinned by hash: packages/testcontainers/fixtures/docker/docker/Dockerfile:15-16
- Warn: npmCommand not pinned by hash: .github/workflows/npm-publish.yml:28
- Info: 1 out of 19 GitHub-owned GitHubAction dependencies pinned
- Info: 1 out of 3 third-party GitHubAction dependencies pinned
- Info: 0 out of 57 containerImage dependencies pinned
- Info: 2 out of 11 npmCommand dependencies pinned
Score
5.4
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More