npmpackage.info

Gathering detailed insights and metrics for @vitejs/plugin-react

Other packages similar to @vitejs/plugin-react

vite-plugin-react-refresh

1.0.0

Provide enhancements for @vitejs/plugin-react-refresh.

@vitejs/plugin-react-swc

3.7.2

Speed up your Vite dev server with SWC

@ls-stack/vite-plugin-react-compiler

0.3.0

A React Compiler Plugin compatible with `@vitejs/plugin-react-swc`

@vitejs/plugin-vue

5.2.1

> Note: as of `vue` 3.2.13+ and `@vitejs/plugin-vue` 1.9.0+, `@vue/compiler-sfc` is no longer required as a peer dependency.

Gathering detailed insights and metrics for @vitejs/plugin-react

@vitejs/plugin-react

The all-in-one Vite plugin for React projects.

4.3.4

612

MIT

TypeScript

364,882,153 5.4

Installations

npm install @vitejs/plugin-react

Pull Requests

Open

7

Total

161

Closed

27

Merged

127

Issues

Open

7

Total

176

Closed

169

Releases

v4.3.4

Published on 26 Nov 2024

v4.3.3

Published on 19 Oct 2024

v4.3.2

Published on 29 Sept 2024

v4.3.1

Published on 10 Jun 2024

v4.3.0

Published on 22 May 2024

v4.2.1

Published on 04 Dec 2023

View all 21 releases

Developer

vitejs

Developer Guide

BETA

Module System

CommonJS, ESM

Min. Node Version

^14.18.0 || >=16.0.0

Typescript Support

Yes

Node Version

20.18.1

NPM Version

10.8.2 Statistics

612 Stars

837 Commits

111 Forks

10 Watching

6 Branches

35 Contributors

Updated on 26 Nov 2024

Languages

TypeScript (67.53%)

JavaScript (24.38%)

CSS (4.41%)

HTML (3.5%)

MDX (0.18%)

Total Downloads

Cumulative downloads

Total Downloads

364,882,153

Last day

0.8%

1,120,272

Compared to previous day

Last week

4.4%

5,819,284

Compared to previous week

Last month

12.9%

23,975,010

Compared to previous month

Last year

115.1%

233,460,123

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Versions

Vite Plugin React

See @vitejs/plugin-react documentation

Packages

Package	Version (click for changelogs)
@vitejs/plugin-react

License

MIT.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Maintained

Determines if the project is "actively maintained".

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

10

Security-Policy

Determines if the project has published a security policy.

5

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

4

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-close-require.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/issue-close-require.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-labeled.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/issue-labeled.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-labeled.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/issue-labeled.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-labeled.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/issue-labeled.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-labeled.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/issue-labeled.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock-closed-issues.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/lock-closed-issues.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/publish.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/publish.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/publish.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/semantic-pull-request.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/vitejs/vite-plugin-react/semantic-pull-request.yml/main?enable=pin
Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 11 third-party GitHubAction dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

5.4

/10

Last Scanned on 2024-11-18

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to @vitejs/plugin-react

Other packages similar to @vitejs/plugin-react

@vitejs/plugin-react

Installations

Pull Requests

7

161

27

127

Issues

7

176

169

Releases

Developer

vitejs

Developer Guide

CommonJS, ESM

^14.18.0 || >=16.0.0

Yes

20.18.1

10.8.2

Statistics

Languages

Total Downloads

364,882,153

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

Dev Dependencies

Vite Plugin React

Packages

License

10

10

10

10

10

5

4

0

0

0

0

0

5.4

/10