Gathering detailed insights and metrics for echarts
Gathering detailed insights and metrics for echarts
Apache ECharts is a powerful, interactive charting and data visualization library for browser
Installations
npm install echartsDeveloper Guide
BETA
Typescript
Yes
Module System
ESM
Node Version
18.15.0
NPM Version
9.5.0
Score
87.9
Supply Chain
99.2
Quality
86.1
Maintenance
100
Vulnerability
86.2
License
Releases
116
Languages
TypeScript
JavaScript
Smarty
HTML
Shell
TypeScript (88.07%)
JavaScript (11.82%)
Smarty (0.06%)
HTML (0.05%)
Developer
Download Statistics
Total
132,656,091
Last Day
46,398
Last Week
998,992
Last Month
4,107,926
Last Year
42,812,440
Statistics
60,854 Stars
9,453 Commits
19,630 Forks
1,967 Watching
35 Branches
252 Contributors
Package Meta Information
Latest Version
5.5.1
Package Id
echarts@5.5.1
Unpacked Size
50.36 MB
Size
9.88 MB
File Count
1,239
NPM Version
9.5.0
Node Version
18.15.0
Publised On
27 Jun 2024
Total Downloads
Cumulative downloads
Total Downloads
132,656,091
Last day
19.5%
46,398
Compared to previous day
Last week
5.7%
998,992
Compared to previous week
Last month
0.2%
4,107,926
Compared to previous month
Last year
38.1%
42,812,440
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
33
@babel/code-frame@babel/core@babel/types@definitelytyped/typescript-versions@definitelytyped/utils@lang/rollup-plugin-dts@microsoft/api-extractor@rollup/plugin-commonjs@rollup/plugin-node-resolve@rollup/plugin-replace@types/jest@typescript-eslint/eslint-plugin@typescript-eslint/parserchalkcommanderdtslintesbuildeslintfs-extraglobbyhuskyjestjest-canvas-mockjshintmagic-stringopenrolluprollup-plugin-terserseedrandomsemverterserts-jesttypescript
Versions
Apache ECharts
Apache ECharts is a free, powerful charting and visualization library offering easy ways to add intuitive, interactive, and highly customizable charts to your commercial products. It is written in pure JavaScript and based on zrender, which is a whole new lightweight canvas library.
Get Apache ECharts
You may choose one of the following methods:
- Download from the official website
npm install echarts --save- CDN: jsDelivr CDN
Docs
Get Help
- GitHub Issues for bug report and feature requests
- Email dev@echarts.apache.org for general questions
- Subscribe to the mailing list to get updated with the project
Build
Build echarts source code:
Execute the instructions in the root directory of the echarts: (Node.js is required)
1# Install the dependencies from NPM: 2npm install 3 4# Rebuild source code immediately in watch mode when changing the source code. 5# It opens the `./test` directory, and you may open `-cases.html` to get the list 6# of all test cases. 7# If you wish to create a test case, run `npm run mktest:help` to learn more. 8npm run dev 9 10# Check the correctness of TypeScript code. 11npm run checktype 12 13# If intending to build and get all types of the "production" files: 14npm run release
Then the "production" files are generated in the dist directory.
Contribution
Please refer to the contributing document if you wish to debug locally or make pull requests.
Resources
Awesome ECharts
https://github.com/ecomfe/awesome-echarts
Extensions
-
ECharts GL An extension pack of ECharts, which provides 3D plots, globe visualization, and WebGL acceleration.
-
Extension for Baidu Map 百度地图扩展 An extension provides a wrapper of Baidu Map Service SDK.
-
vue-echarts ECharts component for Vue.js
-
echarts-stat Statistics tool for ECharts
License
ECharts is available under the Apache License V2.
Code of Conduct
Please refer to Apache Code of Conduct.
Paper
Deqing Li, Honghui Mei, Yi Shen, Shuang Su, Wenli Zhang, Junting Wang, Ming Zu, Wei Chen. ECharts: A Declarative Framework for Rapid Construction of Web-based Visualization. Visual Informatics, 2018.
No vulnerabilities found.
Reason
all changesets reviewed
Reason
30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0
Reason
no binaries found in the repo
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/apache/.github/.github/SECURITY.md:1
- Info: Found linked content: github.com/apache/.github/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/apache/.github/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/apache/.github/.github/SECURITY.md:1
Reason
dependency not pinned by hash detected -- score normalized to 1
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-next.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly-next.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-next.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly-next.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-preview.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/pr-preview.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/stale.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-notice-year.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/update-notice-year.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-notice-year.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/update-notice-year.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/nightly-next.yml:34
- Warn: npmCommand not pinned by hash: .github/workflows/nightly.yml:32
- Warn: npmCommand not pinned by hash: .github/workflows/source-release.yml:39
- Info: 0 out of 25 GitHub-owned GitHubAction dependencies pinned
- Info: 5 out of 8 npmCommand dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/nightly-next.yml:1
- Warn: no topLevel permission defined: .github/workflows/nightly.yml:1
- Warn: no topLevel permission defined: .github/workflows/pr-preview.yml:1
- Warn: no topLevel permission defined: .github/workflows/source-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/teardown-pr-preview.yml:1
- Warn: no topLevel permission defined: .github/workflows/update-notice-year.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
18 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
- Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
- Warn: Project is vulnerable to: GHSA-25hc-qcg6-38wj
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Score
5.6
/10
Last Scanned on 2024-12-02
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More