Gathering detailed insights and metrics for echarts
Gathering detailed insights and metrics for echarts
Apache ECharts is a powerful, interactive charting and data visualization library for browser
Installations
npm install echartsDeveloper Guide
BETA
Typescript
Yes
Module System
ESM
Node Version
18.20.5
NPM Version
10.8.2
Score
90.8
Supply Chain
99.2
Quality
89.2
Maintenance
100
Vulnerability
87.3
License
Releases
119
Languages
5
TypeScript
JavaScript
Smarty
HTML
Shell
TypeScript (88.31%)
JavaScript (11.59%)
Smarty (0.06%)
HTML (0.04%)
Developer
Download Statistics
Total Downloads
158,502,933
Last Day
61,847
Last Week
1,097,483
Last Month
4,673,988
Last Year
50,101,127
GitHub Statistics
Apache-2.0 License
63,944 Stars
10,004 Commits
19,746 Forks
1,974 Watchers
23 Branches
261 Contributors
Updated on Jul 07, 2025
Bundle Size
0.99 MB
Minified
328.36 kB
Minified + Gzipped
Maintainers
9
Package Meta Information
Latest Version
5.6.0
Package Id
echarts@5.6.0
Unpacked Size
50.70 MB
Size
9.95 MB
File Count
1,247
NPM Version
10.8.2
Node Version
18.20.5
Published on
Dec 28, 2024
Total Downloads
Cumulative downloads
Total Downloads
158,502,933
Last Day
26.9%
61,847
Compared to previous day
Last Week
-6.2%
1,097,483
Compared to previous week
Last Month
-1.7%
4,673,988
Compared to previous month
Last Year
38.8%
50,101,127
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
33
@babel/code-frame@babel/core@babel/types@definitelytyped/typescript-versions@definitelytyped/utils@lang/rollup-plugin-dts@microsoft/api-extractor@rollup/plugin-commonjs@rollup/plugin-node-resolve@rollup/plugin-replace@types/jest@typescript-eslint/eslint-plugin@typescript-eslint/parserchalkcommanderdtslintesbuildeslintfs-extraglobbyhuskyjestjest-canvas-mockjshintmagic-stringopenrolluprollup-plugin-terserseedrandomsemverterserts-jesttypescript
Apache ECharts
Apache ECharts is a free, powerful charting and visualization library offering easy ways to add intuitive, interactive, and highly customizable charts to your commercial products. It is written in pure JavaScript and based on zrender, which is a whole new lightweight canvas library.
Get Apache ECharts
You may choose one of the following methods:
- Download from the official website
npm install echarts --save- CDN: jsDelivr CDN
Docs
Get Help
- GitHub Issues for bug report and feature requests
- Email dev@echarts.apache.org for general questions
- Subscribe to the mailing list to get updated with the project
Build
Build echarts source code:
Execute the instructions in the root directory of the echarts: (Node.js is required)
1# Install the dependencies from NPM: 2npm install 3 4# Rebuild source code immediately in watch mode when changing the source code. 5# It opens the `./test` directory, and you may open `-cases.html` to get the list 6# of all test cases. 7# If you wish to create a test case, run `npm run mktest:help` to learn more. 8npm run dev 9 10# Check the correctness of TypeScript code. 11npm run checktype 12 13# If intending to build and get all types of the "production" files: 14npm run release
Then the "production" files are generated in the dist directory.
Contribution
Please refer to the contributing document if you wish to debug locally or make pull requests.
Resources
Awesome ECharts
https://github.com/ecomfe/awesome-echarts
Extensions
-
ECharts GL An extension pack of ECharts, which provides 3D plots, globe visualization, and WebGL acceleration.
-
Extension for Baidu Map 百度地图扩展 An extension provides a wrapper of Baidu Map Service SDK.
-
vue-echarts ECharts component for Vue.js
-
echarts-stat Statistics tool for ECharts
License
ECharts is available under the Apache License V2.
Code of Conduct
Please refer to Apache Code of Conduct.
Paper
Deqing Li, Honghui Mei, Yi Shen, Shuang Su, Wenli Zhang, Junting Wang, Ming Zu, Wei Chen. ECharts: A Declarative Framework for Rapid Construction of Web-based Visualization. Visual Informatics, 2018.
No vulnerabilities found.
Reason
30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0
Reason
no binaries found in the repo
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/apache/.github/.github/SECURITY.md:1
- Info: Found linked content: github.com/apache/.github/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/apache/.github/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/apache/.github/.github/SECURITY.md:1
Reason
dependency not pinned by hash detected -- score normalized to 1
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-next.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly-next.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-next.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly-next.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-preview.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/pr-preview.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/stale.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-notice-year.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/update-notice-year.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-notice-year.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/update-notice-year.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/nightly-next.yml:34
- Warn: npmCommand not pinned by hash: .github/workflows/nightly.yml:32
- Warn: npmCommand not pinned by hash: .github/workflows/source-release.yml:39
- Info: 0 out of 25 GitHub-owned GitHubAction dependencies pinned
- Info: 5 out of 8 npmCommand dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/nightly-next.yml:1
- Warn: no topLevel permission defined: .github/workflows/nightly.yml:1
- Warn: no topLevel permission defined: .github/workflows/pr-preview.yml:1
- Warn: no topLevel permission defined: .github/workflows/source-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/teardown-pr-preview.yml:1
- Warn: no topLevel permission defined: .github/workflows/update-notice-year.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
17 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-6fx8-h7jm-663j
- Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
- Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
Score
5.6
/10
Last Scanned on 2025-06-30
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More