npmpackage.info

Gathering detailed insights and metrics for foalts2-core

foalts2-core

Full-featured Node.js framework 🚀

2.12.1

1,901

MIT

TypeScript

379.16 kB

422 3.5

Installations

npm install foalts2-core

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Min. Node Version

>=10

Node Version

18.15.0

NPM Version

8.6.0 Score

61.2

Supply Chain

82.1

Quality

72.6

Maintenance

Vulnerability

99.3

License

Pull Requests

Open

7

Total

797

Closed

48

Merged

742

Issues

Open

15

Total

493

Closed

478

Releases

v4.5.1

Published on 14 Sept 2024

v4.5.0

Published on 22 Aug 2024

v4.4.0

Published on 25 Apr 2024

v4.3.0

Published on 16 Apr 2024

v4.2.0

Published on 29 Oct 2023

v4.1.0

Published on 24 Oct 2023

View all 94 releases

Contributors

Unable to fetch Contributors

View all 63 contributors

Languages

TypeScript

HTML

JavaScript

Shell

TypeScript (98.24%)

HTML (0.82%)

JavaScript (0.71%)

Shell (0.24%)

Developer

FoalTS

Download Statistics

Total Downloads

422

Last Day

Last Week

Last Month

Last Year

106

GitHub Statistics

1,901 Stars

5,672 Commits

142 Forks

23 Watching

10 Branches

63 Contributors

Sponsor this package

https://github.com/sponsors/LoicPoullain

Maintainers

Package Meta Information

Latest Version

2.12.1

Package Id

foalts2-core@2.12.1

Unpacked Size

379.16 kB

Size

69.53 kB

File Count

222

NPM Version

8.6.0

Node Version

18.15.0

Publised On

27 Jun 2023

Total Downloads

Cumulative downloads

Total Downloads

422

Last day

Compared to previous day

Last week

100%

Compared to previous week

Last month

-30%

Compared to previous month

Last year

-66.5%

106

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

ajv cookie-parser express morgan reflect-metadata

Dev Dependencies

@types/mocha @types/node @types/supertest ejs foalts2-internal-test mocha rimraf source-map-support supertest ts-node twig typescript yamljs

Versions

What is Foal?

Foal (or FoalTS) is a Node.JS framework for creating web applications.

It provides a set of ready-to-use components so you don't have to reinvent the wheel every time. In one single place, you have a complete environment to build web applications. This includes a CLI, testing tools, frontend utilities, scripts, advanced authentication, ORM, deployment environments, GraphQL and Swagger API, AWS utilities, and more. You no longer need to get lost on npm searching for packages and making them work together. All is provided.

But while offering all these features, the framework remains simple. Complexity and unnecessary abstractions are put aside to provide the most intuitive and expressive syntax. We believe that concise and elegant code is the best way to develop an application and maintain it in the future. It also allows you to spend more time coding rather than trying to understand how the framework works.

Finally, the framework is entirely written in TypeScript. The language brings you optional static type-checking along with the latest ECMAScript features. This allows you to detect most silly errors during compilation and improve the quality of your code. It also offers you autocompletion and a well documented API.

https://foalts.org

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Security-Policy

Determines if the project has published a security policy.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

1

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 1

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/daily-test.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/FoalTS/foal/daily-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/daily-test.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/FoalTS/foal/daily-test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/documentation.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/FoalTS/foal/documentation.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/documentation.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/FoalTS/foal/documentation.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/documentation.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/FoalTS/foal/documentation.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/documentation.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/FoalTS/foal/documentation.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/FoalTS/foal/test.yml/master?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/FoalTS/foal/test.yml/master?enable=pin
Warn: npmCommand not pinned by hash: e2e_test.sh:5
Warn: npmCommand not pinned by hash: .github/workflows/daily-test.yml:30
Warn: npmCommand not pinned by hash: .github/workflows/documentation.yml:64
Warn: npmCommand not pinned by hash: .github/workflows/documentation.yml:26
Warn: npmCommand not pinned by hash: .github/workflows/test.yml:34
Warn: npmCommand not pinned by hash: .github/workflows/test.yml:36
Info: 0 out of 8 GitHub-owned GitHubAction dependencies pinned
Info: 2 out of 8 npmCommand dependencies pinned

0

Maintained

Determines if the project is "actively maintained".

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Score

3.5

/10

Last Scanned on 2024-12-23

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More