Gathering detailed insights and metrics for @textile/js-types
Gathering detailed insights and metrics for @textile/js-types
[DEPRECATED] Textile is a set of tools and infrastructure for building composable apps and services on the IPFS network
Installations
npm install @textile/js-typesDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Node Version
11.12.0
NPM Version
6.13.6
Releases
61
Languages
6
Go
Shell
Dockerfile
Makefile
Ruby
Java
Go (98.51%)
Shell (0.78%)
Dockerfile (0.32%)
Makefile (0.18%)
Ruby (0.11%)
Java (0.1%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
355 Stars
1,855 Commits
43 Forks
28 Watchers
12 Branches
16 Contributors
Updated on Jun 29, 2025
Maintainers
4
Package Meta Information
Latest Version
0.7.8
Package Id
@textile/js-types@0.7.8
Unpacked Size
1.52 MB
Size
107.35 kB
File Count
4
NPM Version
6.13.6
Node Version
11.12.0
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
ERROR: No README data found!
No vulnerabilities found.
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
binaries present in source code
Details
- Warn: binary detected: release/PBProject/gradle/wrapper/gradle-wrapper.jar:1
Reason
Found 19/30 approved changesets -- score normalized to 6
Reason
project is archived
Details
- Warn: Repository is archived.
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact v0.7.8 not signed: https://api.github.com/repos/textileio/go-textile/releases/24195363
- Warn: release artifact v0.7.7 not signed: https://api.github.com/repos/textileio/go-textile/releases/22084007
- Warn: release artifact v0.7.6 not signed: https://api.github.com/repos/textileio/go-textile/releases/21597918
- Warn: release artifact v0.7.5 not signed: https://api.github.com/repos/textileio/go-textile/releases/20811199
- Warn: release artifact v0.7.4 not signed: https://api.github.com/repos/textileio/go-textile/releases/20588232
- Warn: release artifact v0.7.8 does not have provenance: https://api.github.com/repos/textileio/go-textile/releases/24195363
- Warn: release artifact v0.7.7 does not have provenance: https://api.github.com/repos/textileio/go-textile/releases/22084007
- Warn: release artifact v0.7.6 does not have provenance: https://api.github.com/repos/textileio/go-textile/releases/21597918
- Warn: release artifact v0.7.5 does not have provenance: https://api.github.com/repos/textileio/go-textile/releases/20811199
- Warn: release artifact v0.7.4 does not have provenance: https://api.github.com/repos/textileio/go-textile/releases/20588232
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: containerImage not pinned by hash: .circleci/Dockerfile:1: pin your Docker image by updating golang:1.13.1 to golang:1.13.1@sha256:61e2bd591355d9c1ece9399e461d91a65beff8a4081df2dce7cd89f42ab1ee76
- Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating golang:1.13.1-stretch to golang:1.13.1-stretch@sha256:fb43085cff7d427476d069bd4d020281956bfbcc99a83cf9d6c69b53df76f69f
- Warn: containerImage not pinned by hash: Dockerfile:40: pin your Docker image by updating busybox:1-glibc to busybox:1-glibc@sha256:bd606c263abed91a141187b92fdb54b87bbc39cfb9068f96ad84196a36963103
- Warn: containerImage not pinned by hash: Dockerfile.cafe:1: pin your Docker image by updating golang:1.13.1-stretch to golang:1.13.1-stretch@sha256:fb43085cff7d427476d069bd4d020281956bfbcc99a83cf9d6c69b53df76f69f
- Warn: containerImage not pinned by hash: Dockerfile.cafe:40: pin your Docker image by updating busybox:1-glibc to busybox:1-glibc@sha256:bd606c263abed91a141187b92fdb54b87bbc39cfb9068f96ad84196a36963103
- Warn: npmCommand not pinned by hash: .circleci/Dockerfile:20
- Warn: goCommand not pinned by hash: Dockerfile:18-20
- Warn: goCommand not pinned by hash: Dockerfile.cafe:18-20
- Info: 0 out of 5 containerImage dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
- Info: 0 out of 2 goCommand dependencies pinned
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 24 are checked with a SAST tool
Reason
21 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GO-2020-0017 / GHSA-w73w-5m7g-f7qc
- Warn: Project is vulnerable to: GHSA-q7pp-wcgr-pffx
- Warn: Project is vulnerable to: GO-2020-0001 / GHSA-6vm3-jj99-7229
- Warn: Project is vulnerable to: GHSA-869c-j7wc-8jqv
- Warn: Project is vulnerable to: GO-2021-0052 / GHSA-h395-qcrw-5vmq
- Warn: Project is vulnerable to: GHSA-3vp4-m3rf-835h
- Warn: Project is vulnerable to: GO-2023-1737 / GHSA-2c4m-59x9-fr2g
- Warn: Project is vulnerable to: GO-2021-0053 / GHSA-c3h9-896r-86jm
- Warn: Project is vulnerable to: GO-2024-2779 / GHSA-r23h-3jmw-q7hr
- Warn: Project is vulnerable to: GO-2022-0779 / GHSA-27pv-q55r-222g
- Warn: Project is vulnerable to: GO-2022-0873 / GHSA-r4gv-vj59-cccm
- Warn: Project is vulnerable to: GO-2023-1557 / GHSA-q264-w97q-q778
- Warn: Project is vulnerable to: GO-2022-0229 / GHSA-cjjc-xp8v-855w
- Warn: Project is vulnerable to: GO-2020-0012 / GHSA-ffhg-7mh4-33c4
- Warn: Project is vulnerable to: GO-2021-0227 / GHSA-3vm4-22fp-5rfm
- Warn: Project is vulnerable to: GO-2022-0968 / GHSA-gwc9-m7rh-j2ww
- Warn: Project is vulnerable to: GO-2021-0356 / GHSA-8c26-wmh5-6g9v
- Warn: Project is vulnerable to: GO-2024-2961
- Warn: Project is vulnerable to: GO-2023-2402 / GHSA-45x7-px36-x8w8
- Warn: Project is vulnerable to: GO-2024-3321 / GHSA-v778-237x-gjrc
- Warn: Project is vulnerable to: GO-2025-3487 / GHSA-hcg3-q754-cr77
Score
2.2
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More