npmpackage.info

Gathering detailed insights and metrics for @textile/threads-service-grpc

Other packages similar to @textile/threads-service-grpc

@textile/threads-client-grpc

1.1.5

A gRPC client for interacting with a remote ThreadDB service.

@textile/threads-net-grpc

1.1.5

A gRPC client for interacting with a remote ThreadDB network service.

@textile/grpc-transport

0.5.2

Custom Websocket transport for interacting with Textile's (remote) Threads gRPC services

Gathering detailed insights and metrics for @textile/threads-service-grpc

@textile/threads-service-grpc - 0.1.11-rc2 | npmpackage.info

@textile/threads-service-grpc

Server-less p2p database built on libp2p

0.1.11-rc2

461

MIT

3.1

Installations

npm install @textile/threads-service-grpc

Developer Guide

BETA

Typescript

No

Module System

N/A

Node Version

12.16.1

NPM Version

6.13.4 Pull Requests

Open

6

Total

308

Closed

70

Merged

232

Issues

Open

83

Total

274

Closed

191

Releases

v1.1.5

Updated on Mar 02, 2022

v1.1.4

Updated on Feb 26, 2022

v1.1.3

Updated on Feb 25, 2022

v1.1.2

Updated on Jan 05, 2022

v1.1.1

Updated on Aug 22, 2021

v1.1.0

Updated on Aug 22, 2021

View All 31 releases

Languages

Dockerfile

Makefile

Go (99.43%)

Dockerfile (0.31%)

Makefile (0.26%)

Developer

textileio

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

461 Stars

570 Commits

64 Forks

17 Watchers

18 Branches

17 Contributors

Updated on Jun 02, 2025

Maintainers

View All 17 Contributors

Package Meta Information

Latest Version

0.1.11-rc2

Package Id

@textile/threads-service-grpc@0.1.11-rc2

Size

11.81 kB

NPM Version

6.13.4

Node Version

12.16.1

Published on

Mar 13, 2020

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@improbable-eng/grpc-web @types/google-protobuf google-protobuf

Dev Dependencies

ts-protoc-gen

ERROR: No README data found!

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

5

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

1

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 1

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-grpc-libs.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/publish-grpc-libs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-grpc-libs.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/publish-grpc-libs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-grpc-libs.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/publish-grpc-libs.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-grpc-libs.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/publish-grpc-libs.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/textileio/go-threads/test.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating golang:1.17.5-buster to golang:1.17.5-buster@sha256:7f89be6ec02f7eb4b429e9a43f4ac7d49d2c0cb79a99a28e2d1efe1e7e8a3473
Warn: containerImage not pinned by hash: Dockerfile:39: pin your Docker image by updating busybox:1.31.0-glibc to busybox:1.31.0-glibc@sha256:7c15dc145873c379dc0b1771da742b64754a9b4d3437d243e4d9f44f496cf6e5
Warn: goCommand not pinned by hash: Dockerfile:18-19
Warn: goCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:42
Warn: goCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:43
Warn: npmCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:46
Warn: npmCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:47
Warn: npmCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:48
Warn: npmCommand not pinned by hash: .github/workflows/publish-grpc-libs.yml:49
Warn: goCommand not pinned by hash: .github/workflows/release.yml:32
Info: 0 out of 12 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 2 third-party GitHubAction dependencies pinned
Info: 0 out of 4 npmCommand dependencies pinned
Info: 0 out of 2 containerImage dependencies pinned
Info: 3 out of 7 goCommand dependencies pinned

1

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Signed-Releases

Determines if the project cryptographically signs release artifacts.

0

SAST

Determines if the project uses static code analysis.

Score

3.1

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More