Installations

npm install azure-pipelines-task-lib

Pull Requests

Open

47

Total

665

Closed

173

Merged

445

Issues

Open

2

Total

377

Closed

375

Releases

Unable to fetch releases

Developer

Microsoft

Developer Guide

BETA

Module System

CommonJS

Min. Node Version

Typescript Support

No

Node Version

16.13.0

NPM Version

8.1.0 Statistics

416 Stars

719 Commits

271 Forks

101 Watching

268 Branches

178 Contributors

Updated on 25 Nov 2024

Bundle Size

158.17 kB

Minified

47.79 kB

Minified + Gzipped

Bundlephobia

Languages

TypeScript (67.67%)

PowerShell (28.95%)

JavaScript (2.1%)

C# (1.24%)

Shell (0.02%)

Batchfile (0.02%)

Total Downloads

Cumulative downloads

Total Downloads

4,446,870

Last day

-21.6%

2,705

Compared to previous day

Last week

1.4%

17,845

Compared to previous week

Last month

-33.3%

77,735

Compared to previous month

Last year

-2%

1,211,710

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

7

adm-zip minimatch nodejs-file-downloader q semver shelljs uuid

Dev Dependencies

8

@types/minimatch @types/mocha @types/node @types/q @types/semver @types/shelljs mocha typescript

Versions

Azure Pipelines Task SDK

Libraries for writing Azure Pipelines tasks

Reference examples of our in the box tasks are here

Status

	Build & Test
Windows
macOS
Linux

Highlights

Breaks coupling with agent: This lib is decoupled and ships with the task and the agent is just an engine to run tasks.
Testability: Aims to offer the ability to actually run your task scripts under all scenarios without a server or an agent.
Localization: The lib provides a mechanism for storing your localized strings with your task, and loading the correct set at run-time.
Consistent API: The TypeScript and PowerShell libs are largely consistent. They only differ where it makes sense (being true to the platform).
Tracing for free: Tracing has been built-in to many of the commands. Use the SDK and get some debug tracing for free.

TypeScript Tasks

Cross platform tasks are written in TypeScript. It is the preferred way to write tasks once.

Documentation: Creating Node Tasks with the Typescript API

PowerShell Tasks

A task which automates Powershell technologies can be written with our Powershell SDK. These only run on Windows.

Documentation: PowerShell API

Notes on authoring Tasks

Starting from version v2.141.0, the agent can now run on three OS architectures: x86, x64, and 32-bit ARM. When authoring a new task, you can check agent variable: Agent.OSArchitecture (possible values: X86, X64, ARM) to restrict running said task to a particular set of OS architectures.

Security issues

Do you think there might be a security issue? Have you been phished or identified a security vulnerability? Please don't report it here - let us know by sending an email to secure@microsoft.com.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Security-Policy

Determines if the project has published a security policy.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

8

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

8

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

6

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

5

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

6.2

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More