Gathering detailed insights and metrics for @webex/recipe-private-web-client
Gathering detailed insights and metrics for @webex/recipe-private-web-client
Installations
npm install @webex/recipe-private-web-clientDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Min. Node Version
>=16
Releases
Unable to fetch releases
Languages
8
JavaScript
TypeScript
Shell
Handlebars
CSS
Python
HTML
Dockerfile
JavaScript (50.7%)
TypeScript (48.54%)
Shell (0.25%)
Handlebars (0.2%)
CSS (0.13%)
Python (0.11%)
HTML (0.07%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
NOASSERTION License
185 Stars
9,385 Commits
375 Forks
38 Watchers
47 Branches
134 Contributors
Updated on Jul 15, 2025
Maintainers
8
Package Meta Information
Latest Version
3.8.1
Package Id
@webex/recipe-private-web-client@3.8.1
Unpacked Size
10.88 kB
Size
3.17 kB
File Count
12
Published on
Jun 16, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
23
@webex/internal-plugin-avatar@webex/internal-plugin-board@webex/internal-plugin-calendar@webex/internal-plugin-conversation@webex/internal-plugin-device@webex/internal-plugin-encryption@webex/internal-plugin-feature@webex/internal-plugin-flag@webex/internal-plugin-lyra@webex/internal-plugin-mercury@webex/internal-plugin-metrics@webex/internal-plugin-presence@webex/internal-plugin-search@webex/internal-plugin-support@webex/internal-plugin-team@webex/internal-plugin-user@webex/plugin-authorization-browser-first-party@webex/plugin-logger@webex/plugin-people@webex/storage-adapter-local-forage@webex/storage-adapter-local-storage@webex/webex-corelodash
Webex JS SDK
This project is designed as a mono-repository for all publicly-provided JavaScript packages from Cisco's Webex Developer Experience team. These packages consist of mostly API-related modules that allow for seamless integration with the collection of services that belong to the Webex platform.
Installation
Since this project is a mono-repository, it provides multiple ways to consume its distributables. Please see the respective sections below for information on how to install and consume this project.
Unified Modules
Unified modules are the quickest way to begin development using the Webex JS SDK. These modules are meant to be consumed as dependencies of another project and can be installed by performing the following commands:
1# using NPM 2npm install {module} 3 4# using Yarn 5yarn add {module}
In addition to the module consumption via NPMJS, these modules can also be consumed via our CDN. See the below examples of how to consume the unified modules via our CDN:
1<html> 2 <head> 3 <!-- via unpkg --> 4 <script crossorigin src="https://unpkg.com/webex@^1/umd/webex.min.js"></script> 5 6 <!-- via jsdelivr --> 7 <script crossorigin src="https://cdn.jsdelivr.net/npm/webex/umd/webex.min.js"></script> 8 </head> 9 <!-- ...application html... --> 10</html>
The available unified modules within this project are listed below:
- webex - The primary webex unified module.
Modular Modules
Modular modules are an alternative to using a unified module, and require a greater understanding of how the modules are architected in order to consume them appropriately. These modules are typically consumed as dependencies of another project and can be installed by performing the following commands:
1# using NPM 2npm install {module} 3 4# using Yarn 5yarn add {module}
The available modular modules within this project are visible when inspecting the contents of the ./packages/@webex/ folder, as well as other published modules (see their README.md files) within the ./packages/ folder.
Usage
This section will define the general usage examples for this project.
Module Consumption
For general consumption documentation, please visit our Cisco Webex for Developers portal, as this will typically what is necessary to begin development using the various packages within the Webex JS SDK. Additionally, some of the modules within this project contain independent documentation available within each of their respective folder scopes. Please review these independent documentation articles as needed.
It is recommended to visit our Getting Started with NodeJS guide for the most up-to-date documentation on consuming the Webex JS SDK via Module.
Browser Consumption
This section outlines how to directly consume the Webex JS SDK unified webex bundle within your HTML document. This bundle can be consumed directly via unpkg or jsdelivr respectfully. See the below examples:
1<html> 2 <head> 3 <!-- via unpkg --> 4 <script crossorigin src="https://unpkg.com/webex@^1/umd/webex.min.js"></script> 5 6 <!-- via jsdelivr --> 7 <script crossorigin src="https://cdn.jsdelivr.net/npm/webex/umd/webex.min.js"></script> 8 </head> 9 <!-- ...application html... --> 10</html>
It is recommended to visit our Getting Started with Browser Usage guide for the most up-to-date documentation on consuming the Webex JS SDK via our CDN within a browser.
Updating the Modules
Since this mono-repository includes a collection of packages that rely on each other to work as intended, it is best to utilize a static version of the Webex JS SDK modules consumed by your application. The best way to do this is by utilizing our helper package: @webex/package-tools.
1# using NPM 2npm install --dev @webex/package-tools 3 4# using Yarn 5yarn add --dev @webex/package-tools
After installation, the following script should be added to your ./package.json for execution:
1{ 2 /* ... */ 3 "scripts": { 4 /* ... */ 5 "update:sdk": "webex-package-tools update --tag {target-dist-tag} --packages {...packages-to-update}" 6 } 7}
The above executable accepts a distribution tag, which will match an available tag from the current tags section of NPMJS as well as a list of packages that should be updated when the command executes (this will collect the latest synced version). It is recommended to provide the --packages argument with the complete list of @webex-scoped packages your project consumes in order to promote well-synchronized versions between all packages.
The @webex/package-tools package contains a collection of helpful tools used to manage packages within this project from both within and outside of this project. Please review the documentation associated with the @webex/package-tools package for more information.
Running and Viewing Samples
Sample code can be found within the samples documentation folder. You can preview the contents of this folder by navigating to https://webex.github.io/webex-js-sdk/samples/ or by building them locally. Please see our contributing guide for more information.
Contribute
For detailed instructions on how to contribute, please refer to the contributing guide.
Issues
Please reach out to our developer support team in regards to any issues you may be experiencing within the Webex JS SDK.
Maintainers
This project is maintained by Cisco Webex for Developers.
License
See our license for more information.
No vulnerabilities found.
Reason
all changesets reviewed
Reason
30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/deploy.yml:1
- Warn: no topLevel permission defined: .github/workflows/pr-title-checker.yml:1
- Warn: no topLevel permission defined: .github/workflows/pull-request.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
dangerous workflow patterns detected
Details
- Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/pull-request.yml:58
- Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/pull-request.yml:129
- Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/pull-request.yml:282
- Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/pull-request.yml:326
- Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/pull-request.yml:372
- Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/pull-request.yml:458
- Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/pull-request.yml:182
- Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/pull-request.yml:239
- Warn: untrusted code checkout '${{ github.event.pull_request.head.sha }}': .github/workflows/pull-request.yml:414
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:218: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:223: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:230: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:290: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:300: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:306: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:77: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:106: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:158: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/deploy.yml/next?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pr-title-checker.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pr-title-checker.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:135: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:166: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:327: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:332: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:339: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:345: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:351: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:373: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:378: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:385: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:391: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:397: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:415: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:420: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:427: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:433: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:439: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:80: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:183: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:188: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:195: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:201: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:207: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:240: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:258: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:264: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:283: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:288: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:301: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:307: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:459: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:464: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:471: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:477: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pull-request.yml:483: update your workflow using https://app.stepsecurity.io/secureworkflow/webex/webex-js-sdk/pull-request.yml/next?enable=pin
- Warn: containerImage not pinned by hash: docker/builder/Dockerfile:1: pin your Docker image by updating node:dubnium to node:dubnium@sha256:59531d2835edd5161c8f9512f9e095b1836f7a1fcb0ab73e005ec46047384911
- Warn: npmCommand not pinned by hash: docker/builder/Dockerfile:12
- Warn: npmCommand not pinned by hash: packages/calling/pipeline/setup.sh:14
- Warn: downloadThenRun not pinned by hash: run.sh:42
- Warn: npmCommand not pinned by hash: run.sh:51
- Info: 0 out of 68 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 downloadThenRun dependencies pinned
- Info: 0 out of 1 containerImage dependencies pinned
- Info: 0 out of 3 npmCommand dependencies pinned
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
59 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-28mc-g557-92m7
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-7q7g-4xm8-89cq
- Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
- Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
- Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
- Warn: Project is vulnerable to: GHSA-75v8-2h7p-7m2m
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
- Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh
- Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-36fh-84j7-cv5h
- Warn: Project is vulnerable to: GHSA-593f-38f6-jp5m
- Warn: Project is vulnerable to: GHSA-x2rg-q646-7m2v
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-44fp-w29j-9vj5
- Warn: Project is vulnerable to: GHSA-4pg4-qvpc-4q3h
- Warn: Project is vulnerable to: GHSA-g5hg-p3ph-g8qg
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6
- Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
- Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-pq67-2wwv-3xjx
- Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-qgmg-gppg-76g5
- Warn: Project is vulnerable to: GHSA-g3ch-rx76-35fx
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
- Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v
- Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Score
3.4
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More