Installations
npm install dustjs-linkedinDeveloper
Developer Guide
Module System
CommonJS, UMD
Min. Node Version
Typescript Support
No
Node Version
12.22.1
NPM Version
6.14.12
Statistics
2,913 Stars
906 Commits
479 Forks
131 Watching
6 Branches
47 Contributors
Updated on 13 Nov 2024
Languages
JavaScript (95.91%)
PEG.js (4.09%)
Total Downloads
Cumulative downloads
Total Downloads
8,901,423
Last day
19.2%
3,686
Compared to previous day
Last week
8.9%
21,409
Compared to previous week
Last month
8.5%
80,072
Compared to previous month
Last year
10.8%
857,708
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
24
Dust.js 
Asynchronous Javascript templating for the browser and server. This fork is maintained by LinkedIn.
Install
NPM
Important: We recommend that you lock your version of Dust to a specific minor version, instead of a major version. By default, NPM will add "dustjs-linkedin": "^2.x.y" to your package.json, which will install new minor versions automatically.
npm install --save --production dustjs-linkedin
# If you want the dustc compiler available globally
npm install --global --production dustjs-linkedin
If you want to add the Dust helpers or secure filters:
npm install --save --production dustjs-helpers
Bower
bower install --save dustjs-linkedin
Get Started
- Read dustjs.com for guides, tutorials, and documentation.
- Check out the
examples/directory in the repo for simple examples to help you get started using Dust in a variety of ways.
Contribute
- The team provides support on Stack Overflow, so that's the best place to ask questions.
- Bug or feature? We welcome issues and pull requests! If you'd like to submit a PR, check out the guide to contributing. PRs should include unit tests.
Stable Version
The latest stable version of the package.
Stable Version
3.0.1
HIGH
1
8.8/10
Summary
dustjs-linkedin vulnerable to Prototype Pollution
Affected Versions
< 3.0.0
Patched Versions
3.0.0
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
Found 8/21 approved changesets -- score normalized to 3
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/tests.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/linkedin/dustjs/tests.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/linkedin/dustjs/tests.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/tests.yml:30
- Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 18 are checked with a SAST tool
Score
4.1
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More