npmpackage.info

Gathering detailed insights and metrics for @web/rollup-plugin-copy

@web/rollup-plugin-copy

Guides, tools and libraries for modern web development.

0.5.1

2,250

MIT

TypeScript

25.38 kB

803,119 3.9

Installations

npm install @web/rollup-plugin-copy

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS, ESM

Min. Node Version

>=18.0.0

Node Version

18.18.2

NPM Version

9.8.1 Score

Supply Chain

63.3

Quality

84.5

Maintenance

100

Vulnerability

99.6

License

Pull Requests

Open

62

Total

1,961

Closed

286

Merged

1,613

Issues

Open

341

Total

840

Closed

499

Releases

1,865

@web/test-runner-saucelabs@0.13.0

Published on 31 Jan 2025

@web/test-runner-saucelabs@0.12.1

Published on 30 Jan 2025

@web/test-runner-saucelabs@0.12.0

Published on 27 Jan 2025

@web/test-runner-browserstack@0.8.0

Published on 27 Jan 2025

@web/test-runner-webdriver@0.9.0

Published on 27 Jan 2025

@web/storybook-builder@0.1.21

Published on 20 Jan 2025

View all 1,865 releases

Contributors

146

View all 146 contributors

Languages

TypeScript

JavaScript

HTML

MDX

CSS

TypeScript (56.57%)

JavaScript (41.06%)

HTML (2.32%)

MDX (0.04%)

Love this project? Help keep it running — sponsor us today! 🚀

Developer

modernweb-dev

Download Statistics

Total Downloads

803,119

Last Day

Last Week

Last Month

36,741

Last Year

434,133

GitHub Statistics

2,250 Stars

3,008 Commits

298 Forks

24 Watching

56 Branches

146 Contributors

Bundle Size

84.71 kB

Minified

25.38 kB

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

0.5.1

Package Id

@web/rollup-plugin-copy@0.5.1

Unpacked Size

6.90 kB

Size

2.34 kB

File Count

NPM Version

9.8.1

Node Version

18.18.2

Publised On

13 Nov 2023

Total Downloads

Cumulative downloads

Total Downloads

803,119

Last day

Compared to previous day

Last week

-99.1%

Compared to previous week

Last month

5.4%

36,741

Compared to previous month

Last year

120.1%

434,133

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

glob

Dev Dependencies

@types/glob

Versions

Rollup Plugin Copy

A Rollup plugin which copies asset files while retaining the relative folder structure.

See our website for full documentation.

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

4

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 4

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/canary.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/canary.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/canary.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/canary.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/canary.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/canary.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/canary.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/canary.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/lint.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/release.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/release.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-browser.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-browser.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-browser.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-browser.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-node.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-node.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/verify-node.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-node.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-node.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/verify-node.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-node.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-storybook-builder.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-storybook-builder.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-storybook-builder.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-storybook-builder.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-storybook-builder.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-storybook-builder.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-storybook-builder.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-storybook-builder.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-storybook-builder.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-storybook-builder.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/verify-storybook-builder.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/modernweb-dev/web/verify-storybook-builder.yml/master?enable=pin
Info: 0 out of 18 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 6 third-party GitHubAction dependencies pinned
Info: 7 out of 7 npmCommand dependencies pinned

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Security-Policy

Determines if the project has published a security policy.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

3.9

/10

Last Scanned on 2025-01-27

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More