Gathering detailed insights and metrics for component
Gathering detailed insights and metrics for component
frontend package manager and build tool for modular web applications
Installations
npm install componentDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Min. Node Version
>= 0.10.0
Node Version
0.12.0
NPM Version
2.5.1
Score
15
Supply Chain
44.3
Quality
73.4
Maintenance
25
Vulnerability
70
License
Releases
Unable to fetch releases
Languages
2
JavaScript
Makefile
JavaScript (99.54%)
Makefile (0.46%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
4,536 Stars
766 Commits
304 Forks
165 Watchers
5 Branches
57 Contributors
Updated on Jun 09, 2025
Maintainers
31
Package Meta Information
Latest Version
1.1.0
Package Id
component@1.1.0
Size
14.38 kB
NPM Version
2.5.1
Node Version
0.12.0
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Component is a vertically integrated frontend solution, handling everything from package management to the build process, handling everything including HTML, JS, CSS, images, and fonts. Think of it as an opinionated npm + browserify + rework-npm + grunt/gulp/broccoli all wrapped into component build.
Want to know more about Component? Visit the guide or view the comparison with other solutions.
If you're confused about component, components, componentjs, please read disambiguation
Component 1.0.0: Several major new features have been added, some have been removed, and the project has been greatly reorganized. You may need to upgrade your version of node and/or npm to avoid breakage. Please see the detailed changelog. Component 0.x will not be maintained anymore.
Installation
First, you need node v0.10+ installed. If you do not have it installed, visit node's download page.
With node installed, run the following command:
$ npm install -g component
Getting Started
Read this Getting Started guide to get a basic static site running very quickly with Component.
Note: the Component repo (this repo) has only documentation for Component 0.19. All of the documentation related to 1.0.0 will be handled in the guide repo.
Team
The team and organization have undergone massive changes. In summary, jonathanong stopped developing Component and started with normalize.io and the guys from segmentio switched to using duo. Component will still be maintained and updated while it is in use. You can read more about Duo.js and Component here.
The long story of Component and the changes that occurred in component can be found in Jonathan Ong's blog post "the future of component".
Development for component (maintenance and features) will be continued at the latest when latest browsers will support the ES6 modules and Web Components natively.
Contributors
- Anton Wilhelm/@timaschew - maintainer
- Keith Rosenberg/@netpoetica - maintainer
- Trevor Gerhardt/@trevorgerhardt - maintainer
- Clinton Wood - maintainer
- Jason Kurht/@jasonkuhrt - maintainer
- visionmedia/@tjholowaychuk - original author
- jonathanong/@jongleberry - second-gen author
- segmentio/segment.io - original sponsor
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
Found 3/27 approved changesets -- score normalized to 1
Reason
project is archived
Details
- Warn: Repository is archived.
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 6 are checked with a SAST tool
Score
3.2
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More