npmpackage.info

Gathering detailed insights and metrics for chownr

Other packages similar to chownr

@types/chownr

1.0.3

TypeScript definitions for chownr

Gathering detailed insights and metrics for chownr

chownr - 3.0.0 | npmpackage.info

chownr

Like `chown -R`

3.0.0

NOASSERTION

JavaScript

21.53 kB

2.9

Installations

npm install chownr

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Min. Node Version

>=18

Node Version

20.11.0

NPM Version

10.5.0 Pull Requests

Open

2

Total

25

Closed

21

Merged

2

Issues

Open

1

Total

9

Closed

8

Releases

Unable to fetch releases

Languages

JavaScript

TypeScript

JavaScript (81.9%)

TypeScript (18.1%)

Developer

isaacs

Download Statistics

Total Downloads

Last Day

Last Week

Last Month

Last Year

GitHub Statistics

NOASSERTION License

31 Stars

54 Commits

18 Forks

2 Watchers

13 Branches

3 Contributors

Updated on Jul 03, 2024

Maintainers

View All 3 Contributors

Package Meta Information

Latest Version

3.0.0

Package Id

chownr@3.0.0

Unpacked Size

21.53 kB

Size

4.30 kB

File Count

NPM Version

10.5.0

Node Version

20.11.0

Published on

Apr 06, 2024

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

NaN

Compared to previous day

Last Week

NaN

Compared to previous week

Last Month

NaN

Compared to previous month

Last Year

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

@types/node mkdirp prettier rimraf tap tshy typedoc

Like chown -R.

Takes the same arguments as fs.chown()

Low

2.5/10

Summary

Time-of-check Time-of-use (TOCTOU) Race Condition in chownr

Affected Versions

< 1.1.0

Patched Versions

1.1.0

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

9

License

Determines if the project has defined a license.

5

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

Maintained

Determines if the project is "actively maintained".

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

Score

2.9

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More