Gathering detailed insights and metrics for ember-cli
Gathering detailed insights and metrics for ember-cli
Installations
npm install ember-cliDeveloper Guide
BETA
Typescript
❌ No
Module System
CommonJS
Min. Node Version
>= 18
Node Version
18.12.0
NPM Version
8.19.2
Score
60.6
Supply Chain
71.4
Quality
81.2
Maintenance
50
Vulnerability
92.7
License
Releases
Release 6.0.1
v6.0.1
Published on 15 Nov 2024
Release 6.1.0-beta.0
v6.1.0-beta.0
Published on 12 Nov 2024
Release 6.0.0
v6.0.0
Published on 12 Nov 2024
Release 6.0.0-beta.0
v6.0.0-beta.0
Published on 01 Oct 2024
Release 5.12.0
v5.12.0
Published on 01 Oct 2024
Release 5.12.0-beta.0
v5.12.0-beta.0
Published on 20 Aug 2024
Developer
Statistics
Updated on 02 Dec 2024
Languages
JavaScript (99.65%)
TypeScript (0.16%)
HTML (0.12%)
PowerShell (0.04%)
Dockerfile (0.02%)
Handlebars (0.02%)
CSS (0.01%)
Total Downloads
Cumulative downloads
Total Downloads
64,290,46864,290,468
Last day
6.7%
Compared to previous day
Last week
-12.3%
Compared to previous week
Last month
13.3%
Compared to previous month
Last year
6.9%
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
84
yamdiffexitglobnoptsanetempchalkexecalodashmorgansemvertestemci-infodag-mapexpressfind-upp-deferresolvetiny-lrbroccolifilesizefs-extrainquirerminimatchos-localetree-syncwalk-syncconsole-uiheimdalljshttp-proxyinflectionis-git-urlportfinderquick-tempworkerpoolcompressionconfigstorecontent-tagcore-objectmarkdown-itcapture-exitfs-tree-diffisbinaryfilesilent-errorbroccoli-stewgit-repo-infobroccoli-debugclean-base-urlwatch-detectorbroccoli-concatbroccoli-funnelbroccoli-sourceget-caller-filenpm-package-argsymlink-or-copybroccoli-builderheimdalljs-graphis-language-codeensure-posix-pathfixturify-projectheimdalljs-loggersort-package-jsonbabel-remove-typespromise-map-seriesbroccoli-middlewarebroccoli-slow-treespromise.hash.helperbroccoli-merge-treesmarkdown-it-terminalresolve-package-pathheimdalljs-fs-monitorsafe-stable-stringifybroccoli-config-loaderember-cli-string-utilsbroccoli-config-replacebroccoli-funnel-reducerember-cli-lodash-subset@pnpm/find-workspace-dirfind-yarn-workspace-rootcalculate-cache-key-for-treeember-cli-is-package-missingember-cli-preprocess-registryember-cli-normalize-entity-name
Dev Dependencies
31
nyctmpchainockjsdommochawhicheslintprettieryuidocjsfixturifysupertestwebsocketchai-filesrelease-itstrip-ansitestdouble@octokit/restlatest-versionbroccoli-plugineslint-plugin-nchai-as-promisedchai-jest-snapshoteslint-plugin-mochabroccoli-test-helpereslint-config-prettiereslint-plugin-prettieryuidoc-ember-cli-themeeslint-plugin-chai-expectember-cli-internal-test-helpersember-cli-blueprint-test-helpers
Versions
ember-cli
The Ember.js command line utility.
Features
- Asset build pipeline using Broccoli.js
- ES6 transpilation using Babel
- Project structure conventions using ES6 module syntax
- Development server including live-reload and API proxy
- File/Project generator using blueprints
- Unit, Integration and Acceptance test support using Testem
- Powerful addon system for extensibility
Installation
npm install -g ember-cli
Usage
After installation the ember CLI tool will be available to you. It is the
entrypoint for all the functionality mentioned above.
You can call ember <command> --help to find out more about all of the
following commands or visit https://cli.emberjs.com/release/ to read
the in-depth documentation.
Documentation
Please refer to the CLI guides for help using Ember CLI.
Contributing
Please see the contributing guidelines
Community
- Discord: Get your invite
- Issues: ember-cli/issues
- Documentation: cli.emberjs.com
License
This project is licensed under the MIT License.
No vulnerabilities found.
Reason
30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
binaries present in source code
Details
- Warn: binary detected: tests/fixtures/express-server/vendor/foo.wasm:1
- Warn: binary detected: tests/fixtures/smoke-tests/serve-wasm/public/foo.wasm:1
Reason
Found 9/17 approved changesets -- score normalized to 5
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/coverage.yml:1
- Warn: no topLevel permission defined: .github/workflows/docs.yml:1
- Warn: no topLevel permission defined: .github/workflows/sync-output-repos.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:123: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:112: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/coverage.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/coverage.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/coverage.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/coverage.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/coverage.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/coverage.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/docs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/docs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/docs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/docs.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/docs.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-output-repos.yml:86: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/sync-output-repos.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sync-output-repos.yml:108: update your workflow using https://app.stepsecurity.io/secureworkflow/ember-cli/ember-cli/sync-output-repos.yml/master?enable=pin
- Warn: containerImage not pinned by hash: dev/linux/Dockerfile:1: pin your Docker image by updating node:latest to node:latest@sha256:ac6abe7d72fe2a535b331d862bf01e064abfd65c7b085c3ca6a51869014474a0
- Warn: npmCommand not pinned by hash: dev/linux/Dockerfile:3
- Warn: npmCommand not pinned by hash: dev/linux/Dockerfile:4
- Warn: npmCommand not pinned by hash: dev/linux/Dockerfile:9
- Info: 0 out of 13 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 2 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 containerImage dependencies pinned
- Info: 0 out of 3 npmCommand dependencies pinned
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 23 are checked with a SAST tool
Reason
21 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-whgm-jr23-g3j9
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc
- Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq
- Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm
- Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-6vfc-qv3f-vr6c
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp
- Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9
- Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
- Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472
- Warn: Project is vulnerable to: GHSA-cchq-frgv-rjh5
- Warn: Project is vulnerable to: GHSA-g644-9gfx-q4q4
Score
4.1
/10
Last Scanned on 2024-12-02
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More