Gathering detailed insights and metrics for echarts
Gathering detailed insights and metrics for echarts
Apache ECharts is a powerful, interactive charting and data visualization library for browser
Installations
npm install echartsScore
87.9
Supply Chain
99.2
Quality
86.1
Maintenance
100
Vulnerability
86.2
License
Developer
Developer Guide
BETA
Module System
ESM
Min. Node Version
Typescript Support
Yes
Node Version
18.15.0
NPM Version
9.5.0
Statistics
60,741 Stars
9,450 Commits
19,617 Forks
1,968 Watching
32 Branches
253 Contributors
Updated on 29 Nov 2024
Bundle Size
0.99 MB
Minified
327.30 kB
Minified + Gzipped
Languages
TypeScript (88.07%)
JavaScript (11.82%)
Smarty (0.06%)
HTML (0.05%)
Total Downloads
Cumulative downloads
Total Downloads
131,311,489
Last day
-0.5%
186,637
Compared to previous day
Last week
1.7%
1,005,849
Compared to previous week
Last month
9.2%
4,224,717
Compared to previous month
Last year
38.5%
42,591,550
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
33
@babel/code-frame@babel/core@babel/types@definitelytyped/typescript-versions@definitelytyped/utils@lang/rollup-plugin-dts@microsoft/api-extractor@rollup/plugin-commonjs@rollup/plugin-node-resolve@rollup/plugin-replace@types/jest@typescript-eslint/eslint-plugin@typescript-eslint/parserchalkcommanderdtslintesbuildeslintfs-extraglobbyhuskyjestjest-canvas-mockjshintmagic-stringopenrolluprollup-plugin-terserseedrandomsemverterserts-jesttypescript
Versions
Apache ECharts
Apache ECharts is a free, powerful charting and visualization library offering easy ways to add intuitive, interactive, and highly customizable charts to your commercial products. It is written in pure JavaScript and based on zrender, which is a whole new lightweight canvas library.
Get Apache ECharts
You may choose one of the following methods:
- Download from the official website
npm install echarts --save- CDN: jsDelivr CDN
Docs
Get Help
- GitHub Issues for bug report and feature requests
- Email dev@echarts.apache.org for general questions
- Subscribe to the mailing list to get updated with the project
Build
Build echarts source code:
Execute the instructions in the root directory of the echarts: (Node.js is required)
1# Install the dependencies from NPM: 2npm install 3 4# Rebuild source code immediately in watch mode when changing the source code. 5# It opens the `./test` directory, and you may open `-cases.html` to get the list 6# of all test cases. 7# If you wish to create a test case, run `npm run mktest:help` to learn more. 8npm run dev 9 10# Check the correctness of TypeScript code. 11npm run checktype 12 13# If intending to build and get all types of the "production" files: 14npm run release
Then the "production" files are generated in the dist directory.
Contribution
Please refer to the contributing document if you wish to debug locally or make pull requests.
Resources
Awesome ECharts
https://github.com/ecomfe/awesome-echarts
Extensions
-
ECharts GL An extension pack of ECharts, which provides 3D plots, globe visualization, and WebGL acceleration.
-
Extension for Baidu Map 百度地图扩展 An extension provides a wrapper of Baidu Map Service SDK.
-
vue-echarts ECharts component for Vue.js
-
echarts-stat Statistics tool for ECharts
License
ECharts is available under the Apache License V2.
Code of Conduct
Please refer to Apache Code of Conduct.
Paper
Deqing Li, Honghui Mei, Yi Shen, Shuang Su, Wenli Zhang, Junting Wang, Ming Zu, Wei Chen. ECharts: A Declarative Framework for Rapid Construction of Web-based Visualization. Visual Informatics, 2018.
No vulnerabilities found.
Reason
30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: Apache License 2.0: LICENSE:0
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/apache/.github/.github/SECURITY.md:1
- Info: Found linked content: github.com/apache/.github/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/apache/.github/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/apache/.github/.github/SECURITY.md:1
Reason
no binaries found in the repo
Reason
dependency not pinned by hash detected -- score normalized to 1
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-next.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly-next.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly-next.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly-next.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/nightly.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pr-preview.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/pr-preview.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:117: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/source-release.yml:126: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/source-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/stale.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-notice-year.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/update-notice-year.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-notice-year.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/apache/echarts/update-notice-year.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/nightly-next.yml:34
- Warn: npmCommand not pinned by hash: .github/workflows/nightly.yml:32
- Warn: npmCommand not pinned by hash: .github/workflows/source-release.yml:39
- Info: 0 out of 25 GitHub-owned GitHubAction dependencies pinned
- Info: 5 out of 8 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/nightly-next.yml:1
- Warn: no topLevel permission defined: .github/workflows/nightly.yml:1
- Warn: no topLevel permission defined: .github/workflows/pr-preview.yml:1
- Warn: no topLevel permission defined: .github/workflows/source-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/teardown-pr-preview.yml:1
- Warn: no topLevel permission defined: .github/workflows/update-notice-year.yml:1
- Info: no jobLevel write permissions found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
18 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
- Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
- Warn: Project is vulnerable to: GHSA-25hc-qcg6-38wj
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Score
5.6
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More