Gathering detailed insights and metrics for glob-stream
Gathering detailed insights and metrics for glob-stream
Installations
npm install glob-streamDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Min. Node Version
>=10.13.0
Node Version
22.16.0
NPM Version
10.9.2
Score
98.5
Supply Chain
99.5
Quality
81.2
Maintenance
100
Vulnerability
100
License
Releases
52
Languages
1
JavaScript
JavaScript (100%)
Developer
gulpjs
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
179 Stars
184 Commits
51 Forks
17 Watchers
3 Branches
29 Contributors
Updated on Jun 01, 2025
Maintainers
2
Package Meta Information
Latest Version
8.0.3
Package Id
glob-stream@8.0.3
Unpacked Size
13.74 kB
Size
5.07 kB
File Count
4
NPM Version
10.9.2
Node Version
22.16.0
Published on
Jun 01, 2025
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
glob-stream
Readable streamx interface over anymatch.
Usage
1var gs = require('glob-stream'); 2 3var readable = gs('./files/**/*.coffee', { 4 /* options */ 5}); 6 7var writable = 8 /* your WriteableStream */ 9 10 readable.pipe(writable);
You can pass any combination of glob strings. One caveat is that you cannot only pass a negative glob, you must give it at least one positive glob so it knows where to start. If given a non-glob path (also referred to as a singular glob), only one file will be emitted. If given a singular glob and no files match, an error is emitted (see also options.allowEmpty).
API
globStream(globs, [options])
Takes a glob string or an array of glob strings as the first argument and an options object as the second. Returns a stream of objects that contain cwd, base and path properties.
Options
options.allowEmpty
Whether or not to error upon an empty singular glob.
Type: Boolean
Default: false (error upon no match)
options.dot
Whether or not to treat dotfiles as regular files. This is passed through to anymatch.
Type: Boolean
Default: false
options.cwd
The current working directory that the glob is resolved against.
Type: String
Default: process.cwd()
options.root
The root path that the glob is resolved against.
Type: String
Default: undefined (use the filesystem root)
options.base
The absolute segment of the glob path that isn't a glob. This value is attached to each glob object and is useful for relative pathing.
Type: String
Default: The absolute path segement before a glob starts (see glob-parent)
options.cwdbase
Whether or not the cwd and base should be the same.
Type: Boolean
Default: false
options.uniqueBy
Filters stream to remove duplicates based on the string property name or the result of function. When using a function, the function receives the streamed data (objects containing cwd, base, path properties) to compare against.
Type: String or Function
Default: 'path'
other
Any glob-related options are documented in picomatch.
License
MIT
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
security policy file detected
Details
- Info: security policy file detected: github.com/gulpjs/.github/SECURITY.md:1
- Info: Found linked content: github.com/gulpjs/.github/SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: github.com/gulpjs/.github/SECURITY.md:1
- Info: Found text in security policy: github.com/gulpjs/.github/SECURITY.md:1
Reason
3 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 4
Reason
Found 5/25 approved changesets -- score normalized to 2
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/dev.yml:1
- Warn: no topLevel permission defined: .github/workflows/release.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/gulpjs/glob-stream/dev.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/dev.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/gulpjs/glob-stream/dev.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/gulpjs/glob-stream/dev.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/dev.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/gulpjs/glob-stream/dev.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/dev.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/gulpjs/glob-stream/dev.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/dev.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/gulpjs/glob-stream/dev.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/gulpjs/glob-stream/release.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/dev.yml:52
- Info: 0 out of 3 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 4 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 18 are checked with a SAST tool
Score
4.6
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More