Gathering detailed insights and metrics for fomantic-ui
Gathering detailed insights and metrics for fomantic-ui
Installations
npm install fomantic-uiDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Min. Node Version
>=12
Score
44.9
Supply Chain
86
Quality
83.6
Maintenance
50
Vulnerability
93.4
License
Releases
32
Contributors
264
Developer
Download Statistics
Total
2,808,066
Last Day
598
Last Week
7,368
Last Month
33,872
Last Year
573,281
Statistics
3,584 Stars
8,618 Commits
333 Forks
55 Watching
5 Branches
264 Contributors
Updated on 07 Dec 2024
Bundle Size
396.00 kB
Minified
103.61 kB
Minified + Gzipped
Maintainers
Languages
JavaScript (64.59%)
Less (34.77%)
HTML (0.42%)
TypeScript (0.22%)
Total Downloads
Cumulative downloads
Total Downloads
2,808,066
Last day
28.6%
598
Compared to previous day
Last week
6.5%
7,368
Compared to previous week
Last month
-0.6%
33,872
Compared to previous month
Last year
-10.5%
573,281
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
41
@actions/core@octokit/core@octokit/restbetter-consolebrowserslistdelextendgulpgulp-autoprefixergulp-chmodgulp-clean-cssgulp-clonegulp-concatgulp-concat-cssgulp-concat-filenamesgulp-copygulp-dedupegulp-flattengulp-gitgulp-headergulp-ifgulp-json-editorgulp-lessgulp-plumbergulp-printgulp-renamegulp-replacegulp-rtlcssgulp-tapgulp-uglifyinquirerjquerylessmap-streammerge-streammkdirpnormalize-pathreplace-extrequire-dot-filewrench-suiyamljs
Versions
Fomantic-UI
The official community fork of the popular Semantic-UI framework.
NOTE: Fomantic was created to continue active development of Semantic-UI and has the intent to be merged back into the master repository once active development can restart. For more info please read the following issues https://github.com/Semantic-Org/Semantic-UI/issues/6109 https://github.com/Semantic-Org/Semantic-UI/issues/6413
EDIT: Lots has changed since we started this project and we are now starting the development of FUI v3. You can read more about the v3 proposals here.
To be clear merging back into SUI is still our intention, read this comment for more info
Fomantic allows developers to build beautiful websites fast, with concise HTML, intuitive javascript, and simplified debugging, helping make front-end development a delightful experience. Fomantic is responsively designed allowing your website to scale on multiple devices.
📡 Installation
1$ npm install fomantic-ui
Living on the edge? Try our nightly build and test new features and bug fixes early!
1$ npm install fomantic-ui@nightly
Fomantic includes an interactive installer to help setup your project.
- For more details on setup visit our getting started guide.
- To learn more about theming please read our theming guide
💻 Browser Support
- Last 2 Versions of Firefox, Chrome, Safari Mac, Edge
- Last 4 Versions of Android, Chrome for Android, iOS Safari1
- IE 112
- Microsoft Edge 12-442
📦 Other packages
| Environment | Install Command | Repository | Third-Party |
|---|---|---|---|
| CSS Only | npm install fomantic-ui-css | Fomantic-UI-CSS | |
| LESS | npm install fomantic-ui-less | Fomantic-UI-LESS | |
| SASS | gem 'fomantic-ui-sass' | Fomantic-UI-SASS | ✅ |
💬 Community
💡 Getting Help
If you're looking for help with an issue we offer multiple ways for you to get support. You can post usage questions here on GitHub or you can ask in our community Discord server.
🐛 Submitting Bugs and Enhancements
GitHub Issues is for suggesting enhancements and reporting bugs. Before submitting a bug make sure you do the following:
- Check to see if the issue has already been raised.
- Fork this boilerplate JSFiddle to create a reproducible example of the bug. If a bug is apparent in the docs you can simply link to the docs example, just make it clear exactly how to reproduce the issue. Only bugs that include a test case can be triaged.
- If submitting an enhancement try and create it in the JSFiddle if not it's fine but explain clearly what you want.
📝 Pull Requests
Before creating a pull request be sure to read the Contributing Guide and our Code of Conduct, this is where we explain everything you need to know about contributing to Fomantic.
Sponsors
Infrastructure hosted and powered by DigitalOcean
Sign up now and get $100 in credit for 60 days! Sign up here!
Cross-browser testing provided by BrowserStack
IDE's provided by JetBrains
Credit
Semantic-UI was beautifully crafted by @jlukic
Footnotes
-
Fomantic-UI should basically still work in iOS Safari 9+, Android 6+, but, starting from v2.9.0, we won't support them anymore if anything works different than in recent versions. ↩
-
Fomantic-UI should basically still work in IE11 / old Edge, but, starting from v2.9.0, we won't support them anymore in terms of dedicated bugfixes. ↩ ↩2
Stable Version
Stable Version
2.9.3
HIGH
1
HIGH
0/10
Summary
Cross-Site Scripting in fomantic-ui
Affected Versions
< 2.7.0
Patched Versions
2.7.0
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
no dangerous workflow patterns detected
Reason
22 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10
Reason
GitHub workflow tokens follow principle of least privilege
Details
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:47
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci.yml:46
- Info: topLevel 'contents' permission set to 'read': .github/workflows/ci.yml:4
- Info: topLevel 'contents' permission set to 'read': .github/workflows/depsreview.yml:5
- Info: topLevel 'contents' permission set to 'read': .github/workflows/nightly.yml:6
- Info: topLevel 'contents' permission set to 'read': .github/workflows/release.yml:6
- Info: no jobLevel write permissions found
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Info: FSF or OSI recognized license: MIT License: LICENSE.md:0
Reason
SAST tool is run on all commits
Details
- Info: SAST configuration detected: CodeQL
- Info: all commits (30) are checked with a SAST tool
Reason
2 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-hpx4-r86g-5jrg
- Warn: Project is vulnerable to: GHSA-prr3-c3m5-p7q2
Reason
Found 5/12 approved changesets -- score normalized to 4
Reason
badge detected: InProgress
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/ci.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/ci.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/ci.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/ci.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/ci.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/ci.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/ci.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/ci.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/depsreview.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/depsreview.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/depsreview.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/depsreview.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/nightly.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/nightly.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/nightly.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/release.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/fomantic/Fomantic-UI/release.yml/develop?enable=pin
- Info: 0 out of 14 GitHub-owned GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
7.5
/10
Last Scanned on 2024-12-02
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More