npmpackage.info

Gathering detailed insights and metrics for data-uri-to-buffer

data-uri-to-buffer

Node.js HTTP Proxy Agents Monorepo

6.0.2

951

TypeScript

2,128,184,079 3.6

Installations

npm install data-uri-to-buffer

Score

99.2

Supply Chain

85.8

Quality

76.8

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

16

Total

166

Closed

54

Merged

96

Issues

Open

25

Total

170

Closed

145

Releases

socks-proxy-agent@8.0.4

Published on 28 Jun 2024

proxy@2.2.0

Published on 28 Jun 2024

pac-proxy-agent@7.0.2

Published on 28 Jun 2024

https-proxy-agent@7.0.5

Published on 28 Jun 2024

socks-proxy-agent@8.0.3

Published on 30 Mar 2024

agent-base@7.1.1

Published on 30 Mar 2024

View all 68 releases

Developer

TooTallNate

Developer Guide

BETA

Module System

CommonJS, ESM

Min. Node Version

>= 14

Typescript Support

Yes

Node Version

20.11.0

NPM Version

10.2.4 Statistics

951 Stars

281 Commits

246 Forks

20 Watching

4 Branches

37 Contributors

Updated on 28 Nov 2024

Languages

TypeScript (95.01%)

JavaScript (4.99%)

Total Downloads

Cumulative downloads

Total Downloads

2,128,184,079

Last day

-8%

3,043,062

Compared to previous day

Last week

3.4%

18,208,397

Compared to previous week

Last month

8.5%

75,534,038

Compared to previous month

Last year

40.4%

744,368,813

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dev Dependencies

@types/jest @types/node jest ts-jest typescript tsconfig

Versions

Node.js HTTP Proxy Agents Monorepo

This monorepo contains various Node.js HTTP Agent implementations that operate over proxies using various protocols.

For the most common use-cases, you should be using the proxy-agent module, which utilizes the other, more low-level, agent implementations.

You can find changelogs here.

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

6

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

3

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

2

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/test.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/test.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/TooTallNate/proxy-agents/test.yml/main?enable=pin
Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 5 third-party GitHubAction dependencies pinned

0

License

Determines if the project has defined a license.

0

Fuzzing

Determines if the project uses fuzzing.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

Score

3.6

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More