Gathering detailed insights and metrics for @textile/threads-net-grpc
Gathering detailed insights and metrics for @textile/threads-net-grpc
Installations
npm install @textile/threads-net-grpcDeveloper Guide
BETA
Typescript
No
Module System
N/A
Node Version
12.22.10
NPM Version
6.14.16
Releases
31
Languages
3
Go
Dockerfile
Makefile
Go (99.43%)
Dockerfile (0.31%)
Makefile (0.26%)
Developer
textileio
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
461 Stars
570 Commits
64 Forks
17 Watchers
18 Branches
17 Contributors
Updated on Jun 02, 2025
Maintainers
7
Package Meta Information
Latest Version
1.1.5
Package Id
@textile/threads-net-grpc@1.1.5
Unpacked Size
209.41 kB
Size
13.57 kB
File Count
5
NPM Version
6.14.16
Node Version
12.22.10
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
1
ERROR: No README data found!
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
Found 8/14 approved changesets -- score normalized to 5
Reason
dependency not pinned by hash detected -- score normalized to 1
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-grpc-libs.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/publish-grpc-libs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-grpc-libs.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/publish-grpc-libs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-grpc-libs.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/publish-grpc-libs.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-grpc-libs.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/publish-grpc-libs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/release.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
- Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating golang:1.17.5-buster to golang:1.17.5-buster@sha256:7f89be6ec02f7eb4b429e9a43f4ac7d49d2c0cb79a99a28e2d1efe1e7e8a3473
- Warn: containerImage not pinned by hash: Dockerfile:39: pin your Docker image by updating busybox:1.31.0-glibc to busybox:1.31.0-glibc@sha256:7c15dc145873c379dc0b1771da742b64754a9b4d3437d243e4d9f44f496cf6e5
- Warn: goCommand not pinned by hash: Dockerfile:18-19
- Warn: goCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:42
- Warn: goCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:43
- Warn: npmCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:46
- Warn: npmCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:47
- Warn: npmCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:48
- Warn: npmCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:49
- Warn: goCommand not pinned by hash: .github/workflows/release.yml:32
- Info: 0 out of 12 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 2 third-party GitHubAction dependencies pinned
- Info: 0 out of 4 npmCommand dependencies pinned
- Info: 0 out of 2 containerImage dependencies pinned
- Info: 3 out of 7 goCommand dependencies pinned
Reason
9 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-9v85-q87q-g4vg
- Warn: Project is vulnerable to: GHSA-r285-q736-9v95
- Warn: Project is vulnerable to: GO-2025-3553 / GHSA-mh63-6h87-95cp
- Warn: Project is vulnerable to: GO-2022-1148 / GHSA-j7qp-mfxf-8xjw
- Warn: Project is vulnerable to: GO-2023-2024 / GHSA-gcq9-qqwx-rgj3
- Warn: Project is vulnerable to: GO-2023-2000 / GHSA-876p-8259-xjgg
- Warn: Project is vulnerable to: GO-2023-2153 / GHSA-m425-mq94-257g / GHSA-qppj-fm5r-hxr3
- Warn: Project is vulnerable to: GO-2024-2611 / GHSA-8r3f-844c-mc37
- Warn: Project is vulnerable to: GO-2022-0322 / GHSA-cg3q-j54f-5p7p
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/publish-grpc-libs.yml:1
- Warn: no topLevel permission defined: .github/workflows/release.yml:1
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact v1.1.5 not signed: https://api.github.com/repos/textileio/go-threads/releases/60763339
- Warn: release artifact v1.1.4 not signed: https://api.github.com/repos/textileio/go-threads/releases/60541766
- Warn: release artifact v1.1.3 not signed: https://api.github.com/repos/textileio/go-threads/releases/60520730
- Warn: release artifact v1.1.2 not signed: https://api.github.com/repos/textileio/go-threads/releases/56428089
- Warn: release artifact v1.1.1 not signed: https://api.github.com/repos/textileio/go-threads/releases/48244267
- Warn: release artifact v1.1.5 does not have provenance: https://api.github.com/repos/textileio/go-threads/releases/60763339
- Warn: release artifact v1.1.4 does not have provenance: https://api.github.com/repos/textileio/go-threads/releases/60541766
- Warn: release artifact v1.1.3 does not have provenance: https://api.github.com/repos/textileio/go-threads/releases/60520730
- Warn: release artifact v1.1.2 does not have provenance: https://api.github.com/repos/textileio/go-threads/releases/56428089
- Warn: release artifact v1.1.1 does not have provenance: https://api.github.com/repos/textileio/go-threads/releases/48244267
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 27 are checked with a SAST tool
Score
3.1
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More