Gathering detailed insights and metrics for bootstrap-italia
Gathering detailed insights and metrics for bootstrap-italia
Installations
npm install bootstrap-italiaDeveloper
Developer Guide
BETA
Module System
CommonJS
Min. Node Version
Typescript Support
Yes
Node Version
20.14.0
NPM Version
10.7.0
Statistics
311 Stars
1,120 Commits
162 Forks
33 Watching
12 Branches
41 Contributors
Updated on 27 Nov 2024
Languages
SCSS (53.83%)
JavaScript (28.99%)
HTML (16.6%)
Python (0.41%)
Ruby (0.07%)
Shell (0.05%)
Dockerfile (0.05%)
Total Downloads
Cumulative downloads
Total Downloads
663,361
Last day
-15.6%
872
Compared to previous day
Last week
-26.8%
4,916
Compared to previous week
Last month
-5%
26,709
Compared to previous month
Last year
85.3%
266,996
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
12
Dev Dependencies
40
@babel/core@babel/plugin-proposal-object-rest-spread@babel/preset-env@babel/preset-react@eslint/eslintrc@eslint/js@octokit/rest@rollup/plugin-babel@rollup/plugin-legacy@rollup/plugin-node-resolve@rollup/plugin-terserbrowser-syncbrowserslist-config-design-italiaconcurrentlyconventional-changelogconventional-changelog-clicross-spawneslinteslint-config-prettiereslint-plugin-prettierfancy-loggh-pagesglobalspa11ypa11y-ciprettierreplace-in-filerolluprollup-plugin-commonjsrollup-plugin-copyrollup-plugin-inject-process-envrollup-plugin-scssrollup-plugin-svg-sprite-deterministicsasssemverstylelintstylelint-config-recommended-scssstylelint-config-standardstylelint-prettierstylelint-scss
Versions
Bootstrap Italia
⚠️ La versione 1.x di Bootstrap Italia (basata su Bootstrap 4) è deprecata
Bootstrap Italia è un framework basato su Bootstrap 5.
Bootstrap Italia eredita tutte le funzionalità, componenti, mixins, grid system, e altro già presenti in Bootstrap 5, personalizzandole per implementare soluzioni secondo le Linee guida di design per i siti internet e i servizi digitali delle Pubbliche Amministrazioni.
Bootstrap Italia è la risorsa di sviluppo dell'ecosistema design system del Paese e implementa pattern e componenti di UI Kit Italia in codice pronto all'uso!
La roadmap del progetto è consultabile nel piano attività di Designers Italia.
Esplora la documentazione di sviluppo »
Esplora la documentazione del design system del Paese »
oppure
Scarica l'ultima versione del framework »
Indice
Segnalazioni e richieste di aiuto
Vuoi fare una segnalazione o una richiesta?
Prima di tutto assicurati che sia un team relativo a Bootstrap Italia e non alla libreria Bootstrap da cui deriva (in tal caso puoi fare riferimento al repository di Bootstrap), scopri il modello di contribuzione del design system del Paese, e poi dai un'occhiata alle indicazioni di dettaglio su come creare una issue a Bootstrap italia.
Come contribuire
Vorresti dare una mano su Bootstrap Italia? Sei nel posto giusto!
Se non l'hai già fatto, inizia spendendo qualche minuto per approfondire la tua conoscenza sulle "Linee guida di design per i siti internet e i servizi digitali della PA" e del manuale operativo di design a supporto partendo dalla pagina dedicata di Designers Italia, scopri il modello di contribuzione del design system del Paese, e fai riferimento alle indicazioni di dettaglio su come contribuire a Bootstrap Italia.
A questo punto, è necessario impostare il tuo ambiente locale per la compilazione dei file sorgente e la generazione della documentazione. Puoi usare Docker per far partire l'ambiente di sviluppo.
1docker-compose up
Licenze software dei componenti di terze parti
Componenti distribuiti con Bootstrap Italia
Vengono di seguito elencati i componenti distribuiti con Bootstrap Italia che hanno una propria licenza diversa da CC0.
- Bootstrap 5 © Twitter, Inc., licenza MIT
- Popper.js © Floating UI contributors, licenza MIT
- SplideJS © Naotoshi Fujita, licenza MIT
- Accessible Autocomplete © Crown Copyright (Government Digital Service), licenza MIT
- AnimeJS © Julian Garnier, licenza MIT
- Just Validate © Horprogs, licenza MIT
- Masonry Layout © David DeSandro, licenza MIT
- Progressbar.js © Kimmo Brunfeldt, licenza MIT
Principali dipendenze per la fase di compilazione e sviluppo
- Generatore di siti statici per ruby Jekyll, © Tom Preston-Werner and Jekyll contributors, licenza MIT
- Tool per il testing della correttezza formale dell'HTML html-proofer, © Garen Torikian, licenza MIT
- Tool per il reload automatico del browser Browser Sync Apache License Version 2.0
- Gestione del versionamento conventional-changelog © conventional-changelog team, ISC License
- Build system per le librerie Javascript e CSS Rollup.js, © questi contributori, licenza MIT
- Code formatter per Javascript Prettier, © James Long and contributors, licenza MIT
- Compilazione SASS sass, © Google Inc., licenza MIT
- GitHub REST API client per JavaScript Octokit rest.js © Cloud9 IDE, Inc. (Mike de Boer), 2017-2018 Octokit contributors, licenza MIT
Componenti utilizzati per la documentazione
Di seguito sono elencati invece i componenti utilizzati per il sito della documentazione ma non ridistribuiti nella libreria Bootstrap Italia
- tsParticles © Matteo Bruni, licenza MIT
- clipboard.js © Zeno Rocha, licenza MIT
- AnchorJS © Bryan Braun, licenza MIT
- Algolia DocSearch © Algolia, licenza MIT
Licenza
La licenza di Bootstrap Italia è BSD 3-Clause ed è visibile nel file LICENSE.
We are using BrowserStack for interactive cross browser testing. They are sponsoring our open source project!
No vulnerabilities found.
Reason
30 commit(s) and 15 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: BSD 3-Clause "New" or "Revised" License: LICENSE:0
Reason
1 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Reason
Found 6/16 approved changesets -- score normalized to 3
Reason
dependency not pinned by hash detected -- score normalized to 3
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/build.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/build.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/ci.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/examples_api_update.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/examples_api_update.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/examples_api_update.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/examples_api_update.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/examples_api_update.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/examples_api_update.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/examples_api_update.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/examples_api_update.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pc-update.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/pc-update.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pc-update.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/pc-update.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/pc-update.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/pc-update.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/publish-release.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-release.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/publish-release.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-release.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/publish-release.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update_docs.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/italia/bootstrap-italia/update_docs.yml/main?enable=pin
- Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating timbru31/ruby-node:3.1-18 to timbru31/ruby-node:3.1-18@sha256:34ce4edb80474fc38a776fdc99be651118b0401882205325212a96033ecdf168
- Warn: npmCommand not pinned by hash: compile-docs.sh:9
- Warn: npmCommand not pinned by hash: .github/workflows/ci.yml:33
- Warn: pipCommand not pinned by hash: .github/workflows/examples_api_update.yml:20
- Warn: npmCommand not pinned by hash: .github/workflows/lint.yml:32
- Warn: npmCommand not pinned by hash: .github/workflows/publish-release.yml:39
- Info: 0 out of 12 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 7 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 pipCommand dependencies pinned
- Info: 0 out of 1 containerImage dependencies pinned
- Info: 6 out of 10 npmCommand dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish-release.yml:12
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/update_docs.yml:10
- Warn: no topLevel permission defined: .github/workflows/build.yml:1
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/examples_api_update.yml:1
- Warn: no topLevel permission defined: .github/workflows/lint.yml:1
- Warn: no topLevel permission defined: .github/workflows/pc-update.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/update_docs.yml:1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact v2.11.2 not signed: https://api.github.com/repos/italia/bootstrap-italia/releases/186212861
- Warn: release artifact v2.11.1 not signed: https://api.github.com/repos/italia/bootstrap-italia/releases/186063777
- Warn: release artifact v2.11.0 not signed: https://api.github.com/repos/italia/bootstrap-italia/releases/183720316
- Warn: release artifact v2.10.0 not signed: https://api.github.com/repos/italia/bootstrap-italia/releases/179521253
- Warn: release artifact v2.9.2 not signed: https://api.github.com/repos/italia/bootstrap-italia/releases/178042727
- Warn: release artifact v2.11.2 does not have provenance: https://api.github.com/repos/italia/bootstrap-italia/releases/186212861
- Warn: release artifact v2.11.1 does not have provenance: https://api.github.com/repos/italia/bootstrap-italia/releases/186063777
- Warn: release artifact v2.11.0 does not have provenance: https://api.github.com/repos/italia/bootstrap-italia/releases/183720316
- Warn: release artifact v2.10.0 does not have provenance: https://api.github.com/repos/italia/bootstrap-italia/releases/179521253
- Warn: release artifact v2.9.2 does not have provenance: https://api.github.com/repos/italia/bootstrap-italia/releases/178042727
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'main'
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 22 are checked with a SAST tool
Score
4.3
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More