Gathering detailed insights and metrics for @vertexvis/utils
Gathering detailed insights and metrics for @vertexvis/utils
Installations
npm install @vertexvis/utilsDeveloper Guide
BETA
Typescript
No
Module System
CommonJS, UMD
Node Version
16.15.1
NPM Version
lerna/4.0.0/node@v16.15.1+x64 (linux)
Releases
72
Languages
5
TypeScript
CSS
Shell
JavaScript
HTML
TypeScript (96.17%)
CSS (2.98%)
Shell (0.46%)
JavaScript (0.29%)
HTML (0.1%)
Developer
Vertexvis
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
12 Stars
652 Commits
3 Forks
4 Watchers
20 Branches
26 Contributors
Updated on Jul 09, 2025
Maintainers
4
Package Meta Information
Latest Version
0.23.5
Package Id
@vertexvis/utils@0.23.5
Unpacked Size
586.80 kB
Size
135.90 kB
File Count
28
NPM Version
lerna/4.0.0/node@v16.15.1+x64 (linux)
Node Version
16.15.1
Published on
Jun 03, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
3
Peer Dependencies
1
Vertex JS Utility Library
This project contains Vertex utility libraries.
No vulnerabilities found.
Reason
19 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
all changesets reviewed
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/Vertexvis/.github/SECURITY.md:1
- Info: Found linked content: github.com/Vertexvis/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/Vertexvis/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/Vertexvis/.github/SECURITY.md:1
Reason
SAST tool is run on all commits
Details
- Info: all commits (30) are checked with a SAST tool
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/branch.yml:1
- Warn: no topLevel permission defined: .github/workflows/master.yml:1
- Warn: no topLevel permission defined: .github/workflows/testing.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:107: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/branch.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/branch.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:103: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:111: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:137: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:153: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/testing.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/testing.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/testing.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/testing.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/testing.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/testing.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/testing.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/testing.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/Vertexvis/vertex-web-sdk/testing.yml/master?enable=pin
- Info: 0 out of 40 GitHub-owned GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
28 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-hxwm-x553-x359
- Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
- Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
- Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
- Warn: Project is vulnerable to: GHSA-4p35-cfcx-8653
- Warn: Project is vulnerable to: GHSA-7f3x-x4pr-wqhj
- Warn: Project is vulnerable to: GHSA-jpp7-7chh-cf67
- Warn: Project is vulnerable to: GHSA-q6wq-5p59-983w
- Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
- Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
- Warn: Project is vulnerable to: GHSA-h755-8qp9-cq85
- Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
- Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw
- Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc
- Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
- Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
Score
6.2
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More