npmpackage.info

alita

A React framework based on umi.

3.5.5

796

MIT

JavaScript

105,381 3.9

Installations

npm install alita

Pull Requests

Open

2

Total

504

Closed

50

Merged

452

Issues

Open

16

Total

174

Closed

158

Releases

Alita Native 发布

v3.0.1

Published on 24 Jun 2022

Alita 3.0.0 发布啦

v3.0.0

Published on 21 Jun 2022

v2.8.36

Published on 18 Apr 2022

v2.8.33-beta.0

Published on 12 Apr 2022

v2.8.32

Published on 28 Mar 2022

动态修改 keepalive 配置

v2.8.27-beta.3

Published on 25 Nov 2021

View all 35 releases

Developer

alitajs

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

Yes

Node Version

20.10.0

NPM Version

10.2.3 Statistics

796 Stars

1,898 Commits

88 Forks

24 Watching

11 Branches

44 Contributors

Updated on 27 Nov 2024

Languages

JavaScript (54.32%)

TypeScript (26.73%)

HTML (9.71%)

Smarty (9.14%)

CSS (0.06%)

Shell (0.03%)

Less (0.02%)

Total Downloads

Cumulative downloads

Total Downloads

105,381

Last day

-66.7%

Compared to previous day

Last week

-28.6%

Compared to previous week

Last month

28.6%

486

Compared to previous month

Last year

-64.8%

8,791

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@alita/types @alita/native @alita/plugins @alita/plugin-azure @umijs/core @umijs/bundler-webpack @umijs/babel-preset-umi @umijs/preset-umi @umijs/utils umi

Versions

alita

A mobile React framework based on umi.

Getting Started

Create Alita App

1yarn create alita

create pc app, use yarn create alita --pc

Please refer to the official website for details.

Community

Github Issue	钉钉群	微信群
alitajs/alita/issues

LICENSE

MIT

Other

React Native Util areslabs/alita

Contributors ✨

Thanks goes to these wonderful people (emoji key):

_小虎oni 💻 📖 🎨	_Ashoka 💻	_陈书航 💻 🔌	_精武陈真 💡	_yuhang 🔌	_{chencheng (云谦)} 🎨	_Yingci 🚇
_阿平 💻	_damon.chen 💻	_修行 💻	_红尘炼心 📖	_tangbzai 💻	_Hexi 💻	_{Damon Wong} 💻
_Alioth 💻	_Penguin-Lin 💻

No vulnerabilities found.

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

1

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/changeset-version.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/changeset-version.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/changeset-version.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/changeset-version.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/changeset-version.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/changeset-version.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/changeset-version.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/changeset-version.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/changeset-version.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/changeset-version.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/ci.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/ci.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/deploy.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/deploy.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/deploy.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/deploy.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/deploy.yml/master?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/deploy.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/alitajs/alita/deploy.yml/master?enable=pin
Info: 0 out of 9 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 5 third-party GitHubAction dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

41 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg
Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-593m-55hh-j8gv
Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
Warn: Project is vulnerable to: GHSA-4q6p-r6v2-jvc5
Warn: Project is vulnerable to: GHSA-33f9-j839-rf8h
Warn: Project is vulnerable to: GHSA-c36v-fmgq-m8hx
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-mh8j-9jvh-gjf6
Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-566m-qj78-rww5
Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-wqq4-5wpv-mx2g
Warn: Project is vulnerable to: GHSA-3787-6prv-h9w3
Warn: Project is vulnerable to: GHSA-9qxr-qj54-h672
Warn: Project is vulnerable to: GHSA-m4v8-wqvr-p9f7
Warn: Project is vulnerable to: GHSA-cchq-frgv-rjh5
Warn: Project is vulnerable to: GHSA-g644-9gfx-q4q4
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc

Score

3.9

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to alita

@alita/types

3.1.2

@alita/types

@alita/plugins

3.5.4

@alita/plugins

@alita/request

3.1.2

@alita/request

@alitajs/umi-presets-alita

2.9.0

@alitajs/umi-presets-alita