Gathering detailed insights and metrics for camunda-bpmn-js
Gathering detailed insights and metrics for camunda-bpmn-js
Embeddable Camunda modeling distributions based on bpmn-js
Installations
npm install camunda-bpmn-jsDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Node Version
22.14.0
NPM Version
10.9.2
Releases
38
Languages
3
JavaScript
TypeScript
CSS
JavaScript (97.27%)
TypeScript (2.16%)
CSS (0.57%)
Developer
camunda
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
117 Stars
934 Commits
23 Forks
8 Watchers
23 Branches
53 Contributors
Updated on Jun 23, 2025
Maintainers
11
Package Meta Information
Latest Version
5.10.0
Package Id
camunda-bpmn-js@5.10.0
Unpacked Size
23.72 MB
Size
5.14 MB
File Count
143
NPM Version
10.9.2
Node Version
22.14.0
Published on
May 23, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
21
@bpmn-io/align-to-origin@bpmn-io/element-template-chooser@bpmn-io/element-template-icon-renderer@bpmn-io/form-variable-provider@bpmn-io/properties-panel@bpmn-io/variable-resolver@camunda/example-data-properties-providerbpmn-jsbpmn-js-color-pickerbpmn-js-create-append-anythingbpmn-js-element-templatesbpmn-js-executable-fixcamunda-bpmn-js-behaviorscamunda-bpmn-moddlediagram-jsdiagram-js-griddiagram-js-minimapdiagram-js-origininherits-browsermin-dashzeebe-bpmn-moddle
Peer Dependencies
1
Dev Dependencies
42
@babel/core@rollup/plugin-commonjs@rollup/plugin-json@rollup/plugin-node-resolve@rollup/plugin-terserbabel-loaderbabel-plugin-istanbulbio-dtsbpmn-js-properties-panelchaicross-envdel-clidownloadjseslinteslint-plugin-bpmn-ioexecafile-dropskarmakarma-chaikarma-chrome-launcherkarma-coveragekarma-debug-launcherkarma-env-preprocessorkarma-firefox-launcherkarma-mochakarma-safari-launcherkarma-sinon-chaikarma-webpackmin-dommochamocha-test-container-supportnpm-run-all2puppeteerraw-loaderremark-cliremark-preset-bpmn-iorolluprollup-plugin-copysinonsinon-chaitypescriptwebpack
camunda-bpmn-js
Embeddable Camunda modeling distributions based on bpmn-js.
Usage
This project is designed to deliver different BPMN modeling distributions. Instead of creating custom Modeler implementations based on bpmn-js, choose one of the existing packages to mirror the modeling experience of Camunda's modeling products.
Use a pre-packaged distribution
1<link rel="stylesheet" href="https://unpkg.com/camunda-bpmn-js@0.1.0/dist/assets/camunda-platform-modeler.css" /> 2 3<script src="https://unpkg.com/camunda-bpmn-js@0.1.0/dist/camunda-platform-modeler.development.js"></script>
or install it via npm
1import BpmnModeler from 'camunda-bpmn-js/lib/camunda-platform/Modeler'; 2 3import 'camunda-bpmn-js/dist/assets/camunda-platform-modeler.css';
into your web-application.
1var bpmnModeler = new BpmnModeler({ 2 container: '#canvas', 3 propertiesPanel: { 4 parent: '#properties' 5 } 6}); 7 8try { 9 10 await bpmnModeler.importXML(someDiagram); 11 12 console.log('success!'); 13 bpmnModeler.get('canvas').zoom('fit-viewport'); 14} catch (err) { 15 16 console.error('something went wrong:', err); 17}
Checkout the docs to learn more about the available distributions.
Build and Run
Prepare the project by installing all dependencies:
1npm install
Then, depending on your use-case, you may run any of the following commands:
1# build the library and run all tests 2npm run all 3 4# spin up a single local camunda platform modeler instance 5npm run start:platform 6 7# run the full development setup 8npm run dev
Related
camunda-bpmn-js builds on top of a few powerful tools:
- bpmn-js: View and edit BPMN 2.0 diagrams in the browser
- diagram-js: Diagram rendering and editing toolkit
- bpmn-js-properties-panel: A panel for (technical) properties editing
- bpmn-js-element-templates: Domain specific editing for bpmn-js
- bpmn-js-create-append-anything: A create/append anything extension for bpmn-js
- bpmn-moddle: A BPMN 2.0 diagram reader/writer with extensions for Camunda 7 and Camunda 8
- camunda-bpmn-js-behaviors: Camunda specific behaviors for bpmn-js
License
MIT
Uses bpmn-js licensed under the bpmn.io license.
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/camunda/.github/SECURITY.md:1
- Info: Found linked content: github.com/camunda/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/camunda/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/camunda/.github/SECURITY.md:1
Reason
SAST tool is run on all commits
Details
- Info: SAST configuration detected: CodeQL
- Info: all commits (20) are checked with a SAST tool
Reason
2 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-8cj5-5rvv-wf4v
Reason
Found 9/19 approved changesets -- score normalized to 4
Reason
dependency not pinned by hash detected -- score normalized to 2
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/camunda/camunda-bpmn-js/CI.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CI.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/camunda/camunda-bpmn-js/CI.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/camunda/camunda-bpmn-js/CI.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/camunda/camunda-bpmn-js/CI.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/CI.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/camunda/camunda-bpmn-js/CI.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CODE_SCANNING.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/camunda/camunda-bpmn-js/CODE_SCANNING.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CODE_SCANNING.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/camunda/camunda-bpmn-js/CODE_SCANNING.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/CODE_SCANNING.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/camunda/camunda-bpmn-js/CODE_SCANNING.yml/main?enable=pin
- Info: 0 out of 5 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 3 third-party GitHubAction dependencies pinned
- Info: 1 out of 1 npmCommand dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/CI.yml:1
- Warn: no topLevel permission defined: .github/workflows/CODE_SCANNING.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'main'
Score
5.9
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More