Gathering detailed insights and metrics for accessibility-checker-engine
Gathering detailed insights and metrics for accessibility-checker-engine
Installations
npm install accessibility-checker-engineReleases
98
Developer
Developer Guide
BETA
Module System
CommonJS
Min. Node Version
Typescript Support
Yes
Node Version
18.20.4
NPM Version
10.7.0
Statistics
635 Stars
5,427 Commits
82 Forks
19 Watching
63 Branches
30 Contributors
Updated on 26 Nov 2024
Languages
JavaScript (73.95%)
HTML (23.9%)
TypeScript (1%)
MDX (0.98%)
CSS (0.09%)
Java (0.06%)
SCSS (0.01%)
Total Downloads
Cumulative downloads
Total Downloads
740,671
Last day
-1.3%
2,319
Compared to previous day
Last week
-12.9%
10,423
Compared to previous week
Last month
6.9%
51,313
Compared to previous month
Last year
74.9%
418,734
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Versions
equal-access
This Git repository hosts tools and supporting components of the IBM Equal Access Toolkit. The Toolkit provides the tools and guidance to create experiences that are delightful for people of all abilities. The guidance is organized by phase, such as Plan, Design, Develop, and Verify, and explains how to integrate these automated testing tools into the Verify phase. The Toolkit is a major part of the accessibility information and applications at ibm.com/able.
Overview
This README covers topics for users who want to find and install the deployed tools as well as topics for developers who want to better understand the various components and build the tools themselves.
The wiki contains overview information, links to videos, and other resources. See the Release Notes for the latest deployed changes in the tools, rules, and components.
Usage
The tools have been deployed to the browser and NPM stores so they can be easily downloaded and installed.
Browser extensions
The browser extensions provide an integrated checking experience and visualizations to help users quickly identify the source of accessibility issues and try fixes:
- Chrome Web Store extension : web browser extension that integrates automated accessibility checking capabilities into the Chrome Developer Tools.
- Firefox Add-on extension : web browser extension that integrates automated accessibility checking capabilities into the Firefox Web Developer Tools.
- Edge Add-on extension : web browser extension that integrates automated accessibility checking capabilities into the Edge Developer Tools.
Automated testing packages
- Node accessibility-checker: automated accessibility testing within a continuous integration pipeline, such as Travis CI for Node-based test environments, that works with test frameworks such as Selenium, Puppeteer, Playwright, and Zombie; and provides the ability to validate results against baseline files, and scan local files.
- Karma-accessibility-checker: automated accessibility testing for the Karma environment.
- Cypress-accessibility-checker: wrapper of the
accessibility-checkerin the Cypress environment.
Requirements for building the tools
Clone Repository
1$ git clone --branch=master https://github.com/IBMa/equal-access.git 2$ cd equal-access
or with SSH
1$ git clone --branch=master git@github.com:IBMa/equal-access.git 2$ cd equal-access
Install dependencies
Under the equal-access directory
1npm install
Now you can select the tool you want to build and follow the tool's README instructions located in its sub-directory.
What's in this repository?
Please review the README of the selected tool for more information specific to that tool
Tools
- accessibility-checker-extension/README: A web developer tools browser extension that adds automated accessibility checking capabilities
- accessibility-checker/README: Automated accessibility testing for Node-based test environments, the ability to validate results against baseline files, and scan local files
- karma-accessibility-checker/README: Automated accessibility testing for the Karma environment
- cypress-accessibility-checker/README: Wrapper of accessibility-checker for the Cypress environment
Components
- accessibility-checker-engine/README: accessibility rules and evaluation engine used by
- rule-server/README: deploys the rules and engine for usage by the tools
Build
Build all the tools and components from the root directory or build each individual tool separately.
Build all the tools from root directory
cd to equal-access if you are not already in the root directory, then run:
1$ npm install 2$ npm run build
All the following libraries or tools are built by running the above commands
- In the equal-access/accessibility-checker-engine/dist directory
- ace-debug.js: uncompressed javascript to be used in a browser environment for development
- ace.js: compressed javascript to be used in a browser environment for production
- ace-node-debug.js: uncompressed javascript library to be used in a NodeJS environment for development
- ace-node.js: compressed javascript library to be used in a NodeJS environment for production
- In the equal-access/accessibility-checker/package directory
- JavaScript source that can be installed or deployed as npm package that works with an HTML parsing engines, such as Selenium, Puppeteer, Playwright, or Zombie to allow developers to perform integrated accessibility testing within a continuous integration pipeline, such as Travis CI. Please view more details.
- In the equal-access/karma-accessibility-checker/package directory
- javascript source that can be used as a Karma plugin, see more details.
Build each individual tool separately
Please check the README for each individual tool for its build instructions:
- accessibility-checker-engine/README
- accessibility-checker-extension/README
- accessibility-checker/README
- cypress-accessibility-checker/README
- karma-accessibility-checker/README
Feedback and reporting bugs
If you think you've found a bug, have questions or suggestions, open a GitHub Issue. If you are an IBM employee, feel free to ask questions in the IBM internal Slack channel #accessibility-at-ibm.
License
No vulnerabilities found.
Reason
30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0
Reason
packaging workflow detected
Details
- Info: Project packages its releases by way of GitHub Actions.: .github/workflows/publish.yml:227
Reason
binaries present in source code
Details
- Warn: binary detected: java-accessibility-checker/boilerplates/junit-playwright/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: java-accessibility-checker/boilerplates/junit-selenium/gradle/wrapper/gradle-wrapper.jar:1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/master.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish.yml:1
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/master.yml:95: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/master.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:139: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:176: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:198: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:211: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:213: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:236: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:237: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:244: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:110: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:293: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:295: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:414: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:415: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:420: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:541: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:543: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:570: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:579: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:160: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:162: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:334: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:336: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:342: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:380: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:381: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:386: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:453: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:455: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:208: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:210: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:250: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:252: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:499: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:501: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:592: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:594: update your workflow using https://app.stepsecurity.io/secureworkflow/IBMa/equal-access/test.yml/master?enable=pin
- Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating debian:bullseye-slim to debian:bullseye-slim@sha256:60a596681410bd31a48e5975806a24cd78328f3fd6b9ee5bc64dca6d46a51f29
- Warn: npmCommand not pinned by hash: Dockerfile:101
- Warn: npmCommand not pinned by hash: accessibility-checker-extension/scripts/mozilla.sh:2
- Warn: npmCommand not pinned by hash: accessibility-checker-extension/scripts/mozilla.sh:6
- Warn: npmCommand not pinned by hash: gitactions/publish/a11y-toolkit-baselines.sh:5
- Warn: downloadThenRun not pinned by hash: gitactions/publish/rules.sh:3
- Warn: npmCommand not pinned by hash: rule-server/local.sh:5
- Warn: npmCommand not pinned by hash: rule-server/local.sh:7
- Warn: npmCommand not pinned by hash: travis/test/ace.sh:2
- Warn: npmCommand not pinned by hash: travis/test/achecker_other.sh:2
- Warn: npmCommand not pinned by hash: travis/test/achecker_other.sh:6
- Warn: npmCommand not pinned by hash: travis/test/achecker_selenium.sh:2
- Warn: npmCommand not pinned by hash: travis/test/achecker_selenium.sh:6
- Warn: npmCommand not pinned by hash: travis/test/extension_build.sh:3
- Warn: npmCommand not pinned by hash: travis/test/extension_build.sh:5
- Warn: npmCommand not pinned by hash: travis/test/karma_achecker_assert.sh:2
- Warn: npmCommand not pinned by hash: travis/test/karma_achecker_content.sh:2
- Warn: npmCommand not pinned by hash: travis/test/karma_achecker_other.sh:2
- Warn: npmCommand not pinned by hash: .github/workflows/master.yml:29
- Warn: npmCommand not pinned by hash: .github/workflows/master.yml:31
- Warn: npmCommand not pinned by hash: .github/workflows/master.yml:33
- Warn: npmCommand not pinned by hash: .github/workflows/master.yml:35
- Warn: npmCommand not pinned by hash: .github/workflows/master.yml:75
- Warn: npmCommand not pinned by hash: .github/workflows/master.yml:77
- Warn: npmCommand not pinned by hash: .github/workflows/master.yml:81
- Warn: npmCommand not pinned by hash: .github/workflows/master.yml:89
- Warn: npmCommand not pinned by hash: .github/workflows/master.yml:114
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:145
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:147
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:149
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:151
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:217
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:29
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:31
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:35
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:43
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:68
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:70
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:72
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:93
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:95
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:97
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:118
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:120
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:122
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:28
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:39
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:72
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:74
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:78
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:86
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:461
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:470
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:472
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:474
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:476
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:392
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:549
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:551
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:553
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:555
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:600
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:168
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:177
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:179
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:181
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:216
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:225
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:227
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:229
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:301
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:310
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:312
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:314
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:347
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:356
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:358
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:360
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:365
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:426
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:258
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:267
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:269
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:271
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:507
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:516
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:518
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:520
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:522
- Info: 0 out of 58 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 4 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 containerImage dependencies pinned
- Info: 0 out of 87 npmCommand dependencies pinned
- Info: 0 out of 1 downloadThenRun dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
22 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-mgfv-m47x-4wqp
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc
- Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695
- Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm
- Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574
- Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm
- Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Score
5
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More