npmpackage.info

Gathering detailed insights and metrics for @verdaccio/utils

Other packages similar to @verdaccio/utils

@verdaccio/signature

6.0.0-6-next.2

verdaccio signature utils

@verdaccio/middleware

6.0.0-6-next.55

express middleware utils

@verdaccio/testing-utilities

10.0.0

Utils for Verdaccio

@sonn51280/utils

1.0.0

Publish Multiple NPM packages from verdaccio storage

Gathering detailed insights and metrics for @verdaccio/utils

@verdaccio/utils - 6.0.0-6-next.44 | npmpackage.info

@verdaccio/utils

A lightweight Node.js private proxy registry

6.0.0-6-next.44

16,990

MIT

TypeScript

85.94 kB

6.2

Installations

npm install @verdaccio/utils

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Min. Node Version

>=12

Node Version

16.20.1

NPM Version

8.19.4 Score

97.8

Supply Chain

91.2

Quality

96.3

Maintenance

100

Vulnerability

99.3

License

Pull Requests

Open

11

Total

3,546

Closed

604

Merged

2,931

Issues

Open

29

Total

1,191

Closed

1,162

Releases

371

v6.1.5

Updated on Jun 29, 2025

v6.1.4

Updated on Jun 17, 2025

v6.1.3

Updated on Jun 15, 2025

v6.1.2

Updated on Apr 01, 2025

v6.1.1

Updated on Mar 30, 2025

v6.1.0

Updated on Mar 24, 2025

View All 371 releases

Languages

TypeScript

JavaScript

CSS

SCSS

Dockerfile

Shell

HTML

Python

TypeScript (93.48%)

JavaScript (3.58%)

CSS (1.46%)

SCSS (0.78%)

Dockerfile (0.56%)

Shell (0.08%)

HTML (0.05%)

Python (0.01%)

Developer

verdaccio

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

MIT License

16,990 Stars

6,152 Commits

1,409 Forks

154 Watchers

14 Branches

305 Contributors

Updated on Jul 01, 2025

Bundle Size

269.74 kB

Minified

85.94 kB

Minified + Gzipped

Bundlephobia

Sponsor this package

https://opencollective.com/verdaccio

Maintainers

View All 305 Contributors

Package Meta Information

Latest Version

6.0.0-6-next.44

Package Id

@verdaccio/utils@6.0.0-6-next.44

Unpacked Size

81.03 kB

Size

22.25 kB

File Count

NPM Version

8.19.4

Node Version

16.20.1

Published on

Aug 20, 2023

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@verdaccio/core minimatch semver lodash

@verdaccio/utils

Donations

Verdaccio is run by volunteers; nobody is working full-time on it. If you find this project to be useful and would like to support its development, consider making a donation - your logo might end up in this readme. 😉

Donate 💵👍🏻 starting from $1/month or just one single contribution.

Report a vulnerability

If you want to report a security vulnerability, please follow the steps which we have defined for you in our security policy.

Open Collective Sponsors

Support this project by becoming a sponsor. Your logo will show up here with a link to your website. [Become a sponsor]

Open Collective Backers

Thank you to all our backers! 🙏 [Become a backer]

Special Thanks

Thanks to the following companies to help us to achieve our goals providing free open source licenses.

Contributors

This project exists thanks to all the people who contribute. [Contribute].

FAQ / Contact / Troubleshoot

If you have any issue you can try the following options, do no desist to ask or check our issues database, perhaps someone has asked already what you are looking for.

License

Verdaccio is MIT licensed

The Verdaccio documentation and logos (excluding /thanks, e.g., .md, .png, .sketch) files within the /assets folder) is Creative Commons licensed.

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

Packaging

Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.

9

SAST

Determines if the project uses static code analysis.

7

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

1

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 1

Details

Warn: third-party GitHubAction not pinned by hash: .github/workflows/changesets.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/verdaccio/verdaccio/changesets.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-publish.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/verdaccio/verdaccio/docker-publish.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-publish.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/verdaccio/verdaccio/docker-publish.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docker-publish.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/verdaccio/verdaccio/docker-publish.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/shared-docker-publish.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/verdaccio/verdaccio/shared-docker-publish.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/shared-docker-publish.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/verdaccio/verdaccio/shared-docker-publish.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/shared-docker-publish.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/verdaccio/verdaccio/shared-docker-publish.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/shared-docker-publish.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/verdaccio/verdaccio/shared-docker-publish.yml/master?enable=pin
Warn: containerImage not pinned by hash: Dockerfile:1
Warn: containerImage not pinned by hash: Dockerfile:24: pin your Docker image by updating node:24-alpine to node:24-alpine@sha256:49e45bf002728e35c3a466737d8bcfe12c29731c7c2f3e223f9a7c794fff19a4
Warn: containerImage not pinned by hash: docker-examples/v4/amazon-s3-docker-example/localStack-resources/Dockerfile:1: pin your Docker image by updating python:3.7-alpine to python:3.7-alpine@sha256:f3d31c8677d03f0b3c724446077f229a6ce9d3ac430f5c08cd7dff00292048c3
Warn: containerImage not pinned by hash: docker-examples/v4/amazon-s3-docker-example/s3Plugin/Dockerfile:1: pin your Docker image by updating verdaccio/verdaccio:4 to verdaccio/verdaccio:4@sha256:c059ee7ae4603e8bf2e70c6b4c941c143be66377d706c9bcc79798072691e8b4
Warn: containerImage not pinned by hash: docker-examples/v4/apache-verdaccio/apache_proxy/Dockerfile:1: pin your Docker image by updating eboraas/apache to eboraas/apache@sha256:c7c5d67f9f6590fa07e19cb83cb6c29813a844b859b7302adb7989f447f17928
Warn: containerImage not pinned by hash: docker-examples/v4/ldap-verdaccio/verdaccio-ldap/Dockerfile:1: pin your Docker image by updating verdaccio/verdaccio:4.2.2 to verdaccio/verdaccio:4.2.2@sha256:63d1bd1efb23f4365ee9b574a9971a4adf1b403b02f3f3efec1ff61d3d884215
Warn: containerImage not pinned by hash: docker-examples/v4/plugins/docker-extend/Dockerfile:1: pin your Docker image by updating verdaccio/verdaccio to verdaccio/verdaccio@sha256:280f8815e1b2e70764e300fb0aea0a37e2effa7fee4831c406a3ae14827f5da8
Warn: containerImage not pinned by hash: docker-examples/v4/reverse_proxy/nginx/relative_path/nginx/Dockerfile:1: pin your Docker image by updating nginx:1.21-alpine to nginx:1.21-alpine@sha256:a74534e76ee1121d418fa7394ca930eb67440deda413848bc67c68138535b989
Warn: containerImage not pinned by hash: docker-examples/v4/reverse_proxy/nginx/relative_path/nginx_ssl/Dockerfile:1: pin your Docker image by updating nginx:1 to nginx:1@sha256:dc53c8f25a10f9109190ed5b59bda2d707a3bde0e45857ce9e1efaa32ff9cbc1
Warn: containerImage not pinned by hash: docker-examples/v4/reverse_proxy/nginx/root_path/conf/nginx/Dockerfile:1: pin your Docker image by updating tutum/nginx to tutum/nginx@sha256:69a727916ab40de88f66407fb0115e35b759d7c6088852d901208479bec47429
Warn: containerImage not pinned by hash: docker-examples/v5/plugins/docker-build-install-plugin/Dockerfile:2: pin your Docker image by updating verdaccio/verdaccio:5 to verdaccio/verdaccio:5@sha256:9d622d256378c6e7ae09f384774ee2f0f8ac67a66c066db55921a0b7218abc4c
Warn: containerImage not pinned by hash: docker-examples/v5/plugins/docker-local-plugin/Dockerfile:4
Warn: containerImage not pinned by hash: docker-examples/v5/plugins/docker-local-plugin/Dockerfile:15: pin your Docker image by updating verdaccio/verdaccio:5 to verdaccio/verdaccio:5@sha256:9d622d256378c6e7ae09f384774ee2f0f8ac67a66c066db55921a0b7218abc4c
Warn: containerImage not pinned by hash: docker-examples/v5/reverse_proxy/nginx/relative_path/nginx/Dockerfile:1: pin your Docker image by updating nginx:1.21-alpine to nginx:1.21-alpine@sha256:a74534e76ee1121d418fa7394ca930eb67440deda413848bc67c68138535b989
Warn: containerImage not pinned by hash: docker-examples/v5/reverse_proxy/nginx/relative_path/nginx_ssl/Dockerfile:1: pin your Docker image by updating nginx:1 to nginx:1@sha256:dc53c8f25a10f9109190ed5b59bda2d707a3bde0e45857ce9e1efaa32ff9cbc1
Warn: containerImage not pinned by hash: docker-examples/v5/reverse_proxy/nginx/root_path/conf/nginx/Dockerfile:1: pin your Docker image by updating tutum/nginx to tutum/nginx@sha256:69a727916ab40de88f66407fb0115e35b759d7c6088852d901208479bec47429
Warn: containerImage not pinned by hash: docker-examples/v5/reverse_proxy/nginx_relative/nginx/Dockerfile:1: pin your Docker image by updating nginx:1.21-alpine to nginx:1.21-alpine@sha256:a74534e76ee1121d418fa7394ca930eb67440deda413848bc67c68138535b989
Warn: containerImage not pinned by hash: docker-examples/v5/reverse_proxy/nginx_relative/nginx_ssl/Dockerfile:1: pin your Docker image by updating nginx:1 to nginx:1@sha256:dc53c8f25a10f9109190ed5b59bda2d707a3bde0e45857ce9e1efaa32ff9cbc1
Warn: containerImage not pinned by hash: docker-examples/v6/amazon-s3-docker-example/s3Plugin/Dockerfile:1: pin your Docker image by updating verdaccio/verdaccio:6.x-next to verdaccio/verdaccio:6.x-next@sha256:258c9b6ca9789b4114b1063b452c7c7accf3be7525c7e90f68566a16f2677d4f
Warn: containerImage not pinned by hash: docker-examples/v6/plugins/docker-build-install-plugin/Dockerfile:5
Warn: containerImage not pinned by hash: docker-examples/v6/plugins/docker-build-install-plugin/Dockerfile:17: pin your Docker image by updating verdaccio/verdaccio:nightly-master to verdaccio/verdaccio:nightly-master@sha256:a0b34c108fc8f078947880dea186f73b1deebe2e2e3807ea7730ef3c62ee8613
Warn: containerImage not pinned by hash: docker-examples/v6/plugins/docker-local-plugin/Dockerfile:4
Warn: containerImage not pinned by hash: docker-examples/v6/plugins/docker-local-plugin/Dockerfile:15: pin your Docker image by updating verdaccio/verdaccio:nightly-master to verdaccio/verdaccio:nightly-master@sha256:a0b34c108fc8f078947880dea186f73b1deebe2e2e3807ea7730ef3c62ee8613
Warn: containerImage not pinned by hash: docker-examples/v6/proxy/apache-verdaccio/apache_proxy/Dockerfile:1: pin your Docker image by updating eboraas/apache to eboraas/apache@sha256:c7c5d67f9f6590fa07e19cb83cb6c29813a844b859b7302adb7989f447f17928
Warn: containerImage not pinned by hash: docker-examples/v6/reverse_proxy/nginx/relative_path/nginx/Dockerfile:1: pin your Docker image by updating nginx:1.21-alpine to nginx:1.21-alpine@sha256:a74534e76ee1121d418fa7394ca930eb67440deda413848bc67c68138535b989
Warn: containerImage not pinned by hash: docker-examples/v6/reverse_proxy/nginx/relative_path/nginx_ssl/Dockerfile:1: pin your Docker image by updating nginx:1 to nginx:1@sha256:dc53c8f25a10f9109190ed5b59bda2d707a3bde0e45857ce9e1efaa32ff9cbc1
Warn: containerImage not pinned by hash: docker-examples/v6/reverse_proxy/nginx/root_path/conf/nginx/Dockerfile:1: pin your Docker image by updating tutum/nginx to tutum/nginx@sha256:69a727916ab40de88f66407fb0115e35b759d7c6088852d901208479bec47429
Warn: containerImage not pinned by hash: docker-examples/v6/verdaccio-github-oauth-ui/plugin/Dockerfile:1: pin your Docker image by updating verdaccio/verdaccio:6.x-next to verdaccio/verdaccio:6.x-next@sha256:258c9b6ca9789b4114b1063b452c7c7accf3be7525c7e90f68566a16f2677d4f
Warn: containerImage not pinned by hash: e2e/docker/apache-verdaccio/apache_proxy/Dockerfile:1: pin your Docker image by updating eboraas/apache to eboraas/apache@sha256:c7c5d67f9f6590fa07e19cb83cb6c29813a844b859b7302adb7989f447f17928
Warn: containerImage not pinned by hash: e2e/docker/docker-build-install-plugin/Dockerfile:1: pin your Docker image by updating verdaccio/verdaccio:nightly-master to verdaccio/verdaccio:nightly-master@sha256:a0b34c108fc8f078947880dea186f73b1deebe2e2e3807ea7730ef3c62ee8613
Warn: containerImage not pinned by hash: e2e/docker/docker-e2e-ui/Dockerfile:1: pin your Docker image by updating verdaccio/verdaccio:nightly-master to verdaccio/verdaccio:nightly-master@sha256:a0b34c108fc8f078947880dea186f73b1deebe2e2e3807ea7730ef3c62ee8613
Warn: containerImage not pinned by hash: e2e/docker/proxy-nginx/nginx/Dockerfile:2: pin your Docker image by updating nginx:alpine to nginx:alpine@sha256:b2e814d28359e77bd0aa5fed1939620075e4ffa0eb20423cc557b375bd5c14ad
Warn: npmCommand not pinned by hash: Dockerfile:14-19
Warn: pipCommand not pinned by hash: docker-examples/v4/amazon-s3-docker-example/localStack-resources/Dockerfile:7
Warn: npmCommand not pinned by hash: docker-examples/v4/amazon-s3-docker-example/s3Plugin/Dockerfile:14
Warn: npmCommand not pinned by hash: docker-examples/v4/amazon-s3-docker-example/s3Plugin/Dockerfile:14
Warn: npmCommand not pinned by hash: docker-examples/v4/ldap-verdaccio/verdaccio-ldap/Dockerfile:3
Warn: npmCommand not pinned by hash: docker-examples/v4/ldap-verdaccio/verdaccio-ldap/Dockerfile:3
Warn: npmCommand not pinned by hash: docker-examples/v4/plugins/docker-extend/Dockerfile:7
Warn: npmCommand not pinned by hash: docker-examples/v4/plugins/docker-extend/Dockerfile:7
Warn: npmCommand not pinned by hash: docker-examples/v5/plugins/docker-build-install-plugin/Dockerfile:5-6
Warn: npmCommand not pinned by hash: docker-examples/v5/plugins/docker-build-install-plugin/Dockerfile:5-6
Warn: npmCommand not pinned by hash: docker-examples/v5/plugins/docker-local-plugin/Dockerfile:11-12
Warn: npmCommand not pinned by hash: docker-examples/v6/amazon-s3-docker-example/s3Plugin/Dockerfile:7
Warn: npmCommand not pinned by hash: docker-examples/v6/plugins/docker-build-install-plugin/Dockerfile:12-14
Warn: npmCommand not pinned by hash: docker-examples/v6/plugins/docker-local-plugin/Dockerfile:11-12
Warn: npmCommand not pinned by hash: docker-examples/v6/verdaccio-github-oauth-ui/plugin/Dockerfile:7
Warn: npmCommand not pinned by hash: e2e/docker/docker-build-install-plugin/Dockerfile:5-7
Warn: npmCommand not pinned by hash: e2e/docker/docker-build-install-plugin/Dockerfile:5-7
Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:94
Warn: npmCommand not pinned by hash: .github/workflows/docker-proxy-apache-e2e.yml:40
Warn: npmCommand not pinned by hash: .github/workflows/docker-proxy-apache-e2e.yml:42
Warn: npmCommand not pinned by hash: .github/workflows/docker-proxy-apache-e2e.yml:46
Warn: npmCommand not pinned by hash: .github/workflows/docker-proxy-nginx-e2e.yml:38
Warn: npmCommand not pinned by hash: .github/workflows/docker-proxy-nginx-e2e.yml:40
Warn: npmCommand not pinned by hash: .github/workflows/docker-proxy-nginx-e2e.yml:44
Warn: npmCommand not pinned by hash: .github/workflows/plugin-generator-e2e.yaml:28
Warn: npmCommand not pinned by hash: .github/workflows/plugin-generator-e2e.yaml:38
Warn: npmCommand not pinned by hash: .github/workflows/plugin-generator-e2e.yaml:40
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-angular-cli-workflow.yml:55
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-angular-cli-workflow.yml:72
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-angular-cli-workflow.yml:76
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-angular-cli-workflow.yml:91
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-angular-cli-workflow.yml:108
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-angular-cli-workflow.yml:112
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-angular-cli-workflow.yml:18
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-angular-cli-workflow.yml:35
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-angular-cli-workflow.yml:39
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-audit-workflow.yml:18
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-audit-workflow.yml:30
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-gatsbyjs-cli-workflow.yml:18
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-gatsbyjs-cli-workflow.yml:36
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-gatsbyjs-cli-workflow.yml:53
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-gatsbyjs-cli-workflow.yml:71
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-jest-workflow.yml:83
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-jest-workflow.yml:95
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-jest-workflow.yml:116
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-jest-workflow.yml:128
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-jest-workflow.yml:149
Warn: npmCommand not pinned by hash: .github/workflows/x-e2e-jest-workflow.yml:161
Warn: npmCommand not pinned by hash: .github/workflows/x-smok-test-docker.yml:28
Warn: npmCommand not pinned by hash: .github/workflows/x-smok-test-docker.yml:30
Warn: npmCommand not pinned by hash: .github/workflows/x-smok-test-docker.yml:32
Warn: npmCommand not pinned by hash: .github/workflows/x-smok-test-docker.yml:34
Warn: npmCommand not pinned by hash: .github/workflows/x-smok-test-module.yml:35
Warn: npmCommand not pinned by hash: .github/workflows/x-smok-test-module.yml:41
Warn: npmCommand not pinned by hash: .github/workflows/x-smok-test-module.yml:42
Info: 67 out of 67 GitHub-owned GitHubAction dependencies pinned
Info: 5 out of 13 third-party GitHubAction dependencies pinned
Info: 0 out of 32 containerImage dependencies pinned
Info: 0 out of 54 npmCommand dependencies pinned
Info: 0 out of 1 pipCommand dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

Reason

detected GitHub workflow tokens with excessive permissions

Details

Info: jobLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:26
Info: jobLevel 'actions' permission set to 'read': .github/workflows/codeql-analysis.yml:25
Info: jobLevel 'contents' permission set to 'read': .github/workflows/website.yml:17
Warn: jobLevel 'deployments' permission set to 'write': .github/workflows/website.yml:18
Warn: no topLevel permission defined: .github/workflows/changesets-pr.yml:1
Warn: no topLevel permission defined: .github/workflows/changesets.yml:1
Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:16
Info: topLevel 'contents' permission set to 'read': .github/workflows/codeql-analysis.yml:16
Warn: no topLevel permission defined: .github/workflows/docker-proxy-apache-e2e.yml:1
Warn: no topLevel permission defined: .github/workflows/docker-proxy-nginx-e2e.yml:1
Info: topLevel 'contents' permission set to 'read': .github/workflows/docker-publish.yml:11
Info: topLevel 'contents' permission set to 'read': .github/workflows/e2e-ci.yml:5
Info: topLevel 'contents' permission set to 'read': .github/workflows/e2e-ui.yml:6
Warn: no topLevel permission defined: .github/workflows/plugin-generator-e2e.yaml:1
Warn: no topLevel permission defined: .github/workflows/shared-docker-publish.yml:1
Info: topLevel 'contents' permission set to 'read': .github/workflows/static-data.yml:16
Warn: no topLevel permission defined: .github/workflows/test-docker-build.yml:1
Warn: no topLevel permission defined: .github/workflows/test-publish-package.yml:1
Info: topLevel 'contents' permission set to 'read': .github/workflows/ui-components.yml:15
Info: topLevel 'contents' permission set to 'read': .github/workflows/website.yml:8
Warn: no topLevel permission defined: .github/workflows/x-e2e-angular-cli-workflow.yml:1
Warn: no topLevel permission defined: .github/workflows/x-e2e-audit-workflow.yml:1
Warn: no topLevel permission defined: .github/workflows/x-e2e-gatsbyjs-cli-workflow.yml:1
Warn: no topLevel permission defined: .github/workflows/x-e2e-jest-workflow.yml:1
Warn: no topLevel permission defined: .github/workflows/x-release-snapshot.yml:1
Warn: no topLevel permission defined: .github/workflows/x-release.yml:1
Warn: no topLevel permission defined: .github/workflows/x-smok-test-docker.yml:1
Warn: no topLevel permission defined: .github/workflows/x-smok-test-module.yml:1
Warn: no topLevel permission defined: .github/workflows/yarn-ci-lint.yml:1
Warn: no topLevel permission defined: .github/workflows/yarn-ci.yml:1

0

Fuzzing

Determines if the project uses fuzzing.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

41 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj
Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-vhxf-7vqr-mrjg
Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
Warn: Project is vulnerable to: GHSA-f7f6-9jq7-3rqj
Warn: Project is vulnerable to: GHSA-rrr8-f88r-h8q6
Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
Warn: Project is vulnerable to: GHSA-75v8-2h7p-7m2m
Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh
Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42
Warn: Project is vulnerable to: GHSA-cg87-wmx4-v546
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-hj9c-8jmm-8c52
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-vm32-9rqf-rh3r
Warn: Project is vulnerable to: GHSA-8cc4-rfj6-fhg4
Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
Warn: Project is vulnerable to: GHSA-x7hr-w5r2-h6wg
Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
Warn: Project is vulnerable to: GHSA-64vr-g452-qvp3
Warn: Project is vulnerable to: GHSA-9cwx-2883-4wfx
Warn: Project is vulnerable to: GHSA-vg6x-rcgg-rjx6
Warn: Project is vulnerable to: GHSA-x574-m823-4x7w
Warn: Project is vulnerable to: GHSA-4r4m-qw57-chr8
Warn: Project is vulnerable to: GHSA-xcj6-pq6g-qj4x
Warn: Project is vulnerable to: GHSA-356w-63v5-8wf4
Warn: Project is vulnerable to: GHSA-859w-5945-r5v3
Warn: Project is vulnerable to: GHSA-9crc-q9x8-hgqq
Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v
Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h

Score

6.2

/10

Last Scanned on 2025-06-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More