Gathering detailed insights and metrics for jquery
Gathering detailed insights and metrics for jquery
Gathering detailed insights and metrics for jquery
Gathering detailed insights and metrics for jquery
npm install jquery
Typescript
Module System
Node Version
NPM Version
99.3
Supply Chain
90.2
Quality
82.6
Maintenance
100
Vulnerability
100
License
Release 4.0.0-beta.2
Updated on Jul 17, 2024
jQuery 4.0.0 BETA!
Updated on Feb 06, 2024
jQuery 3.7.1 Released: Reliable Table Row Dimensions
Updated on Aug 28, 2023
jQuery 3.7.0: Staying in Order
Updated on May 11, 2023
jQuery 3.6.4 Released: Selector Forgiveness
Updated on Mar 08, 2023
jQuery supports CSS.supports in jQuery 3.6.3
Updated on Dec 20, 2022
JavaScript (94.09%)
HTML (4.93%)
PHP (0.68%)
CSS (0.16%)
Shell (0.13%)
Total Downloads
2,153,959,506
Last Day
1,385,410
Last Week
13,917,961
Last Month
59,787,802
Last Year
626,795,645
MIT License
59,522 Stars
6,761 Commits
20,596 Forks
3,159 Watchers
7 Branches
289 Contributors
Updated on Jun 01, 2025
Minified
Minified + Gzipped
Latest Version
3.7.1
Package Id
jquery@3.7.1
Unpacked Size
1.19 MB
Size
394.76 kB
File Count
125
NPM Version
9.6.7
Node Version
18.17.1
Published on
Aug 28, 2023
Cumulative downloads
Total Downloads
Last Day
3.7%
1,385,410
Compared to previous day
Last Week
-3.7%
13,917,961
Compared to previous week
Last Month
0.5%
59,787,802
Compared to previous month
Last Year
42.2%
626,795,645
Compared to previous year
42
jQuery is a fast, small, and feature-rich JavaScript library.
For information on how to get started and how to use jQuery, please see jQuery's documentation. For source files and issues, please visit the jQuery repo.
If upgrading, please see the blog post for 3.7.1. This includes notable differences from the previous version and a more readable changelog.
Below are some of the most common ways to include jQuery.
1<script src="https://code.jquery.com/jquery-3.7.1.min.js"></script>
There are several ways to use Webpack, Browserify or Babel. For more information on using these tools, please refer to the corresponding project's documentation. In the script, including jQuery will usually look like this:
1import $ from "jquery";
If you need to use jQuery in a file that's not an ECMAScript module, you can use the CommonJS syntax:
1var $ = require( "jquery" );
AMD is a module format built for the browser. For more information, we recommend require.js' documentation.
1define( [ "jquery" ], function( $ ) { 2 3} );
To include jQuery in Node, first install with npm.
1npm install jquery
For jQuery to work in Node, a window with a document is required. Since no such window exists natively in Node, one can be mocked by tools such as jsdom. This can be useful for testing purposes.
1const { JSDOM } = require( "jsdom" ); 2const { window } = new JSDOM( "" ); 3const $ = require( "jquery" )( window );
7.5/10
Summary
Denial of Service in jquery
Affected Versions
= 3.0.0-rc.1
Patched Versions
3.0.0
6.9/10
Summary
Potential XSS vulnerability in jQuery
Affected Versions
>= 1.0.3, < 3.5.0
Patched Versions
3.5.0
6.1/10
Summary
Cross-Site Scripting in jquery
Affected Versions
>= 1.2.1, < 1.9.0
Patched Versions
1.9.0
6.1/10
Summary
Duplicate Advisory: jQuery Cross Site Scripting vulnerability
Affected Versions
>= 1.0.3, < 3.5.0
Patched Versions
3.5.0
6.1/10
Summary
Cross-Site Scripting (XSS) in jquery
Affected Versions
>= 1.12.3, < 3.0.0
Patched Versions
3.0.0
6.1/10
Summary
Cross-Site Scripting (XSS) in jquery
Affected Versions
< 1.12.2
Patched Versions
1.12.2
6.9/10
Summary
Potential XSS vulnerability in jQuery
Affected Versions
>= 1.2.0, < 3.5.0
Patched Versions
3.5.0
0/10
Summary
Duplicate Advisory: Prototype Pollution in jquery
Affected Versions
< 3.4.0
Patched Versions
3.4.0
0/10
Summary
jQuery vulnerable to Cross-Site Scripting (XSS)
Affected Versions
< 1.6.3
Patched Versions
1.6.3
6.1/10
Summary
XSS in jQuery as used in Drupal, Backdrop CMS, and other products
Affected Versions
>= 1.1.4, < 3.4.0
Patched Versions
3.4.0
6.1/10
Summary
Cross-Site Scripting in jquery
Affected Versions
<= 1.8.3
Patched Versions
1.9.0
Reason
security policy file detected
Details
Reason
7 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Reason
all changesets reviewed
Reason
no binaries found in the repo
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
Reason
SAST tool is run on all commits
Details
Reason
1 existing vulnerabilities detected
Details
Reason
dependency not pinned by hash detected -- score normalized to 8
Details
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
Reason
project is not fuzzed
Details
Score
Last Scanned on 2025-05-26
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More