Installations
npm install liferay-npm-bundler-plugin-resolve-linked-dependenciesReleases
309
eslint-plugin/v1.6.0
eslint-plugin/v1.6.0
Published on 18 Oct 2024
liferay-theme-tasks/v11.5.4
liferay-theme-tasks/v11.5.4
Published on 28 Aug 2024
npm-scripts/v51.2.0
npm-scripts/v51.2.0
Published on 07 Jun 2024
npm-scripts/v51.1.0
npm-scripts/v51.1.0
Published on 06 Jun 2024
alloy-ui/v3.1.0-deprecated.118
alloy-ui/v3.1.0-deprecated.118
Published on 19 Apr 2024
liferay-js-toolkit/v2.32.0
liferay-js-toolkit/v2.32.0
Published on 05 Mar 2024
Developer
liferay
Developer Guide
BETA
Module System
CommonJS
Min. Node Version
Typescript Support
No
Node Version
16.19.1
NPM Version
lerna/3.20.1/node@v16.19.1+x64 (linux)
Statistics
69 Stars
16,529 Commits
68 Forks
19 Watching
14 Branches
134 Contributors
Updated on 07 Nov 2024
Languages
JavaScript (75.23%)
TypeScript (13.22%)
HTML (3.89%)
Java (2.61%)
SCSS (2.54%)
EJS (1.41%)
CSS (0.47%)
Shell (0.23%)
Batchfile (0.16%)
Smarty (0.13%)
FreeMarker (0.12%)
Total Downloads
Cumulative downloads
Total Downloads
1,408,778
Last day
23.4%
1,417
Compared to previous day
Last week
25.7%
7,415
Compared to previous week
Last month
7.6%
28,494
Compared to previous month
Last year
-5.7%
353,896
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
3
Versions
liferay-frontend-projects monorepo
Welcome to the monorepo of the Liferay Frontend Infrastructure team.
This is an experimental exploration of the ideas proposed in liferay-frontend-guidelines#88, "Explore consolidation of projects to reduce overhead".
Issues and Pull Requests
You can file issues for any of the projects contained in this repository using our predefined templates.
Every project has its own CONTRIBUTING.md file explaining how to contribute to the project or how to setup the local development environment but, as a general rule, before starting to work in any new feature by yourself, file a question issue to discuss it and see if it fits in the backlog.
For bugs, simply comment in the bug issue that you are working on a fix to avoid duplicating work.
We follow some guidelines to format commits and pull requests so that our CHANGELOG files and Git history are correctly maintained.
You can also check the change logs of the project releases in the releases page.
Now, to the list of projects contained in this repository.
Guidelines
Documentation
These are the documents that used to live in the liferay-frontend-guidelines repository.
- Projects
guidelines/: High-level introduction to the guidelines.guidelines/general/: General guidance about working in any Liferay codebase.guidelines/dxp/: Guidance specific to working on Liferay DXP.guidelines/css/: Guidance about CSS.
- Issues
- label:
guidelines,dependencies: Requests to add new development dependencies - label:
guidelines,rfc: Proposals for changes to guidelines - label:
guidelines,question: Question about Liferay's frontend practices
- label:
- Pull requests
Package eslint-plugin
This is an ESLint shareable config that helps enforce the Liferay Frontend Guidelines.
- Project
- Issues
- Pull requests
- npm packages
Projects
Liferay DXP Development Tools
These include the toolkits to deal with themes, JavaScript projects, and the AMD Loader, which is the piece of software that comes with liferay-portal and orchestrates all JS module loading and wiring.
Liferay Themes Toolkit
- Projects
- Themes Toolkit v10.x+: Develop themes for DXP versions 7.2 and above (uses Gulp 4)
- Themes Toolkit v9.x: Develop themes for DXP versions 7.2 and 7.3 (uses Gulp 3)
- Themes Toolkit v8.x: Develop themes for DXP versions 7.0 and 7.1
- Issues
- Pull requests
- npm packages
- generator-liferay-theme: Yeoman generator to create Liferay DXP Theme projects
- liferay-theme-tasks: Gulp tasks to build and deploy Liferay DXP Theme projects
Liferay JS Toolkit
- Projects
- JS Toolkit v2.x: Develop JavaScript portlets and packages suitable for deployment to Liferay DXP
- JS Toolkit v3.x: An experimental and NOT officially released revamp of the JS Toolkit based on webpack
- Issues
- Pull requests
- npm packages
- generator-liferay-js: Yeoman generator to create Liferay JavaScript projects
- liferay-npm-bundler: A webpack-like bundler to process npm packages and make them suitable for deployment to Liferay DXP and its AMD Loader
- liferay-npm-build-support: Some scripts to help building JAR artifacts to be deployed to Liferay DXP
Liferay AMD Loader
- Projects
- amd-loader: The AMD Loader included with Liferay DXP
- Issues
- Pull requests
- npm packages
Internal Development Tools (npm-tools)
This is a collection of utilities to deal with building liferay-portal.
- Projects
- npm-tools: The yarn workspace holding the projects
- npm-scripts: A collection of npm scripts to build JavaScript projects in Liferay DXP
- changelog-generator: A tool to generate a section inside a
CHANGELOG.mdexplaining the changes of a specific release (based on merged PRs) - js-publish: A tool to publish packages to npm based on our standard workflow
- jest-junit-reporter: A JUnit reporter for Jest
- js-insights: A simple dependency analysis reporter that scans ES6 modules for imports and generate a report on used external packages
- Issues
- Pull requests
- npm packages
Maintenance
These are projects that are not under active development but which may receive bug fixes.
- Projects
- Senna.js: Single Page Application engine.
- Issues
- Pull requests
- npm packages
Third-party
In addition to our own projects listed above, we sometimes have the need to apply small patches on top of third-party code.
- Projects
- alloy-ui: A fork of https://github.com/liferay/alloy-ui
- alloy-font-awesome: A fork of https://github.com/liferay/alloy-font-awesome
- jquery-form: A fork of https://github.com/jquery-form/form
- Issues
- Pull requests
- npm packages
No vulnerabilities found.
Reason
16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
binaries present in source code
Details
- Warn: binary detected: maintenance/projects/js-toolkit/qa/gradle/wrapper/gradle-wrapper.jar:1
Reason
Found 1/18 approved changesets -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/amd-loader.yml:1
- Warn: no topLevel permission defined: .github/workflows/conventional-commits.yml:1
- Warn: no topLevel permission defined: .github/workflows/format.yml:1
- Warn: no topLevel permission defined: .github/workflows/guidelines.yml:1
- Warn: no topLevel permission defined: .github/workflows/js-themes-toolkit-v8-x.yml:1
- Warn: no topLevel permission defined: .github/workflows/js-themes-toolkit-v9-x.yml:1
- Warn: no topLevel permission defined: .github/workflows/js-toolkit-v2.yml:1
- Warn: no topLevel permission defined: .github/workflows/labeler.yml:1
- Warn: no topLevel permission defined: .github/workflows/lint.yml:1
- Warn: no topLevel permission defined: .github/workflows/lockfile.yml:1
- Warn: no topLevel permission defined: .github/workflows/new-portal-release.yml:1
- Warn: no topLevel permission defined: .github/workflows/prettier-plugin.yml:1
- Warn: no topLevel permission defined: .github/workflows/projects.yml:1
- Warn: no topLevel permission defined: .github/workflows/senna.yml:1
- Warn: no topLevel permission defined: .github/workflows/triage.yml:1
- Info: no jobLevel write permissions found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'master'
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/amd-loader.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/amd-loader.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/amd-loader.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/amd-loader.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/amd-loader.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/amd-loader.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/amd-loader.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/amd-loader.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/amd-loader.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/amd-loader.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/amd-loader.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/amd-loader.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/conventional-commits.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/conventional-commits.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/format.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/format.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/format.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/format.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/format.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/format.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/guidelines.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/guidelines.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/guidelines.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/guidelines.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/guidelines.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/guidelines.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v8-x.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v8-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v8-x.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v8-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v8-x.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v8-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v8-x.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v8-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v8-x.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v8-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v8-x.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v8-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v9-x.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v9-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v9-x.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v9-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v9-x.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v9-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v9-x.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v9-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v9-x.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v9-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-themes-toolkit-v9-x.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-themes-toolkit-v9-x.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-toolkit-v2.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-toolkit-v2.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-toolkit-v2.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-toolkit-v2.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-toolkit-v2.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-toolkit-v2.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-toolkit-v2.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-toolkit-v2.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-toolkit-v2.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-toolkit-v2.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/js-toolkit-v2.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/js-toolkit-v2.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/labeler.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/labeler.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/lint.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/lint.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lint.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/lint.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lockfile.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/lockfile.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lockfile.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/lockfile.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/lockfile.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/lockfile.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/new-portal-release.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/new-portal-release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prettier-plugin.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/prettier-plugin.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prettier-plugin.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/prettier-plugin.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prettier-plugin.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/prettier-plugin.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prettier-plugin.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/prettier-plugin.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prettier-plugin.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/prettier-plugin.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/prettier-plugin.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/prettier-plugin.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/projects.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/projects.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/projects.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/projects.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/projects.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/projects.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/projects.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/projects.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/projects.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/projects.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/projects.yml:65: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/projects.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/senna.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/senna.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/senna.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/senna.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/senna.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/senna.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/senna.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/senna.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/senna.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/senna.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/senna.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/liferay/liferay-frontend-projects/senna.yml/master?enable=pin
- Info: 0 out of 56 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 22 are checked with a SAST tool
Reason
205 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
- Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5
- Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp
- Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq
- Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr
- Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765
- Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
- Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25
- Warn: Project is vulnerable to: GHSA-897m-rjf5-jp39
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
- Warn: Project is vulnerable to: GHSA-ff7x-qrg7-qggm
- Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
- Warn: Project is vulnerable to: GHSA-ww39-953v-wcq6
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-765h-qjxv-5f44
- Warn: Project is vulnerable to: GHSA-f2jv-r9rf-7988
- Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-qqgx-2p2h-9c37
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
- Warn: Project is vulnerable to: GHSA-f98m-q3hr-p5wq
- Warn: Project is vulnerable to: GHSA-39q4-p535-c852
- Warn: Project is vulnerable to: GHSA-h86x-mv66-gr5q
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m / GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-w7rc-rwvf-8q5r
- Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
- Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
- Warn: Project is vulnerable to: GHSA-4p35-cfcx-8653
- Warn: Project is vulnerable to: GHSA-7f3x-x4pr-wqhj
- Warn: Project is vulnerable to: GHSA-jpp7-7chh-cf67
- Warn: Project is vulnerable to: GHSA-q6wq-5p59-983w
- Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
- Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
- Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
- Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
- Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
- Warn: Project is vulnerable to: GHSA-vx3p-948g-6vhq
- Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
- Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw
- Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc
- Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
- Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-29xr-v42j-r956
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
- Warn: Project is vulnerable to: GHSA-38fc-wpqx-33j7
- Warn: Project is vulnerable to: GHSA-c4w7-xm78-47vh
- Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r
- Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx
- Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4
- Warn: Project is vulnerable to: GHSA-phwq-j96m-2c2q
- Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
- Warn: Project is vulnerable to: GHSA-74fj-2j2h-c42q
- Warn: Project is vulnerable to: GHSA-pw2r-vq6v-hr8c
- Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
- Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
- Warn: Project is vulnerable to: GHSA-6x33-pw7p-hmpq
- Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695
- Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm
- Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574
- Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm
- Warn: Project is vulnerable to: GHSA-7wpw-2hjm-89gp
- Warn: Project is vulnerable to: GHSA-r8f7-9pfq-mjmv
- Warn: Project is vulnerable to: GHSA-px4h-xg32-q955
- Warn: Project is vulnerable to: GHSA-566m-qj78-rww5
- Warn: Project is vulnerable to: GHSA-hwj9-h5mp-3pm3
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-7mwh-4pqv-wmr8
- Warn: Project is vulnerable to: GHSA-4jqc-8m5r-9rpr
- Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
- Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
- Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc
- Warn: Project is vulnerable to: GHSA-g78m-2chm-r7qv
- Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc
- Warn: Project is vulnerable to: GHSA-6chw-6frg-f759
- Warn: Project is vulnerable to: GHSA-w8qv-6jwh-64r5
- Warn: Project is vulnerable to: GHSA-6cpc-mj5c-m9rq
- Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9
- Warn: Project is vulnerable to: GHSA-8r6j-v8pm-fqw3
- Warn: Project is vulnerable to: MAL-2023-462
- Warn: Project is vulnerable to: GHSA-xf7w-r453-m56c
- Warn: Project is vulnerable to: GHSA-4q6p-r6v2-jvc5
- Warn: Project is vulnerable to: GHSA-q42p-pg8m-cqh6
- Warn: Project is vulnerable to: GHSA-2cf5-4w76-r9qv
- Warn: Project is vulnerable to: GHSA-3cqr-58rm-57f8
- Warn: Project is vulnerable to: GHSA-g9r4-xpmj-mj65
- Warn: Project is vulnerable to: GHSA-q2c6-c6pm-g3gh
- Warn: Project is vulnerable to: GHSA-w457-6q6x-cgp9
- Warn: Project is vulnerable to: GHSA-9prh-257w-9277
- Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq
- Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm
- Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp
- Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546
- Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q
- Warn: Project is vulnerable to: GHSA-6c8f-qphg-qjgp
- Warn: Project is vulnerable to: GHSA-hxm2-r34f-qmc5
- Warn: Project is vulnerable to: GHSA-5fw9-fq32-wv5p
- Warn: Project is vulnerable to: GHSA-g6ww-v8xp-vmwg
- Warn: Project is vulnerable to: GHSA-j44m-qm6p-hp7m
- Warn: Project is vulnerable to: GHSA-jgrx-mgxx-jf9v
- Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-6fc8-4gx4-v693
- Warn: Project is vulnerable to: GHSA-jg8v-48h5-wgxg
- Warn: Project is vulnerable to: GHSA-36fh-84j7-cv5h
- Warn: Project is vulnerable to: GHSA-hc6q-2mpp-qw7j
- Warn: Project is vulnerable to: GHSA-9mvj-f7w8-pvh2
- Warn: Project is vulnerable to: GHSA-9vvw-cc9w-f27h
- Warn: Project is vulnerable to: GHSA-j4f2-536g-r55m
- Warn: Project is vulnerable to: GHSA-r7qp-cfhv-p84w
- Warn: Project is vulnerable to: GHSA-qh2h-chj9-jffq
- Warn: Project is vulnerable to: GHSA-jcpv-g9rr-qxrc
- Warn: Project is vulnerable to: GHSA-7x7c-qm48-pq9c
- Warn: Project is vulnerable to: GHSA-rc3x-jf5g-xvc5
- Warn: Project is vulnerable to: GHSA-82v2-mx6x-wq7q
- Warn: Project is vulnerable to: GHSA-6vfc-qv3f-vr6c
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
- Warn: Project is vulnerable to: GHSA-4xcv-9jjx-gfj3
- Warn: Project is vulnerable to: GHSA-87vv-r9j6-g5qv
- Warn: Project is vulnerable to: GHSA-446m-mv8f-q348
- Warn: Project is vulnerable to: GHSA-8hfj-j24r-96c4
- Warn: Project is vulnerable to: GHSA-w9mr-4mfr-499f
- Warn: Project is vulnerable to: GHSA-28xh-wpgr-7fm8
- Warn: Project is vulnerable to: GHSA-q75g-2496-mxpp
- Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9
- Warn: Project is vulnerable to: GHSA-7xfp-9c55-5vqj
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-fxwf-4rqh-v8g3
- Warn: Project is vulnerable to: GHSA-25hc-qcg6-38wj
- Warn: Project is vulnerable to: GHSA-xfhh-g9f5-x4m4
- Warn: Project is vulnerable to: GHSA-qm95-pgcg-qqfq
- Warn: Project is vulnerable to: GHSA-cqmj-92xf-r6r9
- Warn: Project is vulnerable to: GHSA-mxhp-79qh-mcx6
- Warn: Project is vulnerable to: GHSA-cf4h-3jhx-xvhq
- Warn: Project is vulnerable to: GHSA-v2p6-4mp7-3r9v
- Warn: Project is vulnerable to: GHSA-mgfv-m47x-4wqp
- Warn: Project is vulnerable to: GHSA-5v72-xg48-5rpm
- Warn: Project is vulnerable to: GHSA-72mh-269x-7mh5
- Warn: Project is vulnerable to: GHSA-h4j5-c7cj-74xg
- Warn: Project is vulnerable to: GHSA-36jr-mh4h-2g58
- Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
- Warn: Project is vulnerable to: GHSA-4xjh-m3qx-49wc
- Warn: Project is vulnerable to: GHSA-mqm2-cgpr-p4m6
- Warn: Project is vulnerable to: GHSA-jj47-x69x-mxrm
- Warn: Project is vulnerable to: GHSA-wwh7-4jw9-33x6
- Warn: Project is vulnerable to: GHSA-whgm-jr23-g3j9
- Warn: Project is vulnerable to: GHSA-4w2v-q235-vp99
- Warn: Project is vulnerable to: GHSA-cph5-m8f7-6c5x
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-7gc6-qh9x-w6h8
- Warn: Project is vulnerable to: GHSA-3wcq-x3mq-6r9p
- Warn: Project is vulnerable to: GHSA-jc84-3g44-wf2q
- Warn: Project is vulnerable to: GHSA-6h5x-7c5m-7cr7
- Warn: Project is vulnerable to: GHSA-9qj9-36jm-prpv
- Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq
- Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488
- Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g
- Warn: Project is vulnerable to: GHSA-wc69-rhjr-hc9g
- Warn: Project is vulnerable to: GHSA-gwg9-rgvj-4h5j
- Warn: Project is vulnerable to: GHSA-3fx5-fwvr-xrjg
- Warn: Project is vulnerable to: GHSA-7mc5-chhp-fmc3
- Warn: Project is vulnerable to: GHSA-f9cm-p3w6-xvr3
- Warn: Project is vulnerable to: GHSA-jjv7-qpx3-h62q
- Warn: Project is vulnerable to: GHSA-xwg4-93c6-3h42
- Warn: Project is vulnerable to: GHSA-jgqf-hwc5-hh37
- Warn: Project is vulnerable to: GHSA-c3x7-gjmx-r2ff
- Warn: Project is vulnerable to: GHSA-jv35-xqg7-f92r
- Warn: Project is vulnerable to: GHSA-w5p7-h5w8-2hfq
- Warn: Project is vulnerable to: GHSA-9m6j-fcg5-2442
- Warn: Project is vulnerable to: GHSA-hh27-ffr2-f2jc
- Warn: Project is vulnerable to: GHSA-rqff-837h-mm52
- Warn: Project is vulnerable to: GHSA-8v38-pw62-9cw2
- Warn: Project is vulnerable to: GHSA-hgjh-723h-mx2j
- Warn: Project is vulnerable to: GHSA-jf5r-8hm2-f872
Score
3.3
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More