Gathering detailed insights and metrics for URIjs
Gathering detailed insights and metrics for URIjs
Installations
npm install URIjsDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
0.12.7
NPM Version
2.14.2
Score
99.9
Supply Chain
71.4
Quality
77.9
Maintenance
100
Vulnerability
100
License
Releases
43
1.19.11 (April 3rd 2022)
v1.19.11
Updated on Apr 03, 2022
1.19.10 (March 5th 2022)
v1.19.10
Updated on Mar 05, 2022
1.19.9 (March 3rd 2022)
v1.19.9
Updated on Mar 03, 2022
1.19.8 (February 15th 2022)
v1.19.8
Updated on Feb 15, 2022
1.19.7 (July 14th 2021)
v1.19.7
Updated on Jul 14, 2021
1.19.6 (February 13th 2021)
v1.19.6
Updated on Feb 13, 2021
Languages
4
JavaScript
HTML
CSS
PHP
JavaScript (74.22%)
HTML (23.65%)
CSS (1.89%)
PHP (0.24%)
Developer
Download Statistics
Total Downloads
12,898,341
Last Day
1,790
Last Week
94,321
Last Month
374,083
Last Year
2,946,444
GitHub Statistics
MIT License
6,261 Stars
689 Commits
475 Forks
116 Watchers
5 Branches
68 Contributors
Updated on Jul 02, 2025
Bundle Size
38.54 kB
Minified
12.15 kB
Minified + Gzipped
Maintainers
2
Package Meta Information
Latest Version
1.16.1
Package Id
URIjs@1.16.1
Size
45.41 kB
NPM Version
2.14.2
Node Version
0.12.7
Total Downloads
Cumulative downloads
Total Downloads
12,898,341
Dev Dependencies
3
URI.js
NOTE: The npm package moved to
urijs, please update your dependencies accordingly, asURIjswill not receive further updates.
High
7.5/10
Summary
URIjs Hostname spoofing via backslashes in URL
Affected Versions
< 1.19.6
Patched Versions
1.19.6
High
7.2/10
Summary
Incorrect protocol extraction via \r, \n and \t characters
Affected Versions
< 1.19.11
Patched Versions
1.19.11
Moderate
5.3/10
Summary
URIjs Vulnerable to Hostname spoofing via backslashes in URL
Affected Versions
< 1.19.7
Patched Versions
1.19.7
Moderate
6.5/10
Summary
URL Confusion When Scheme Not Supplied in medialize/uri.js
Affected Versions
< 1.19.11
Patched Versions
1.19.11
Moderate
6.1/10
Summary
Open Redirect in urijs
Affected Versions
< 1.19.10
Patched Versions
1.19.10
Moderate
5.3/10
Summary
Leading white space bypasses protocol validation
Affected Versions
< 1.19.9
Patched Versions
1.19.9
Moderate
6.5/10
Summary
Authorization Bypass Through User-Controlled Key in urijs
Affected Versions
< 1.19.8
Patched Versions
1.19.8
Moderate
6.5/10
Summary
Hostname spoofing via backslashes in URL
Affected Versions
< 1.19.4
Patched Versions
1.19.4
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE.txt:0
- Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0
Reason
Found 1/30 approved changesets -- score normalized to 0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'gh-pages'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 1 are checked with a SAST tool
Score
3.9
/10
Last Scanned on 2025-06-30
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More