Gathering detailed insights and metrics for lit-element
Gathering detailed insights and metrics for lit-element
Lit is a simple library for building fast, lightweight web components.
Installations
npm install lit-elementDeveloper Guide
BETA
Typescript
Yes
Module System
ESM
Node Version
20.19.0
NPM Version
10.8.2
Score
99.4
Supply Chain
79.4
Quality
87.4
Maintenance
100
Vulnerability
100
License
Releases
549
lit@3.3.0
lit@3.3.0
Updated on Apr 11, 2025
@lit/reactive-element@2.1.0
@lit/reactive-element@2.1.0
Updated on Apr 11, 2025
lit-html@3.3.0
lit-html@3.3.0
Updated on Apr 11, 2025
lit-element@4.2.0
lit-element@4.2.0
Updated on Apr 11, 2025
@lit/context@1.1.5
@lit/context@1.1.5
Updated on Apr 11, 2025
@lit-labs/nextjs@0.2.3
@lit-labs/nextjs@0.2.3
Updated on Apr 11, 2025
Languages
6
TypeScript
JavaScript
HTML
CSS
Vue
Shell
TypeScript (58.93%)
JavaScript (38.48%)
HTML (2.19%)
CSS (0.23%)
Vue (0.17%)
Shell (0.01%)
Developer
Download Statistics
Total Downloads
264,831,668
Last Day
107,295
Last Week
2,631,462
Last Month
11,636,117
Last Year
110,484,619
GitHub Statistics
BSD-3-Clause License
19,796 Stars
2,567 Commits
969 Forks
210 Watchers
216 Branches
194 Contributors
Updated on Jun 09, 2025
Bundle Size
15.74 kB
Minified
5.92 kB
Minified + Gzipped
Maintainers
13
Package Meta Information
Latest Version
4.2.0
Package Id
lit-element@4.2.0
Unpacked Size
120.43 kB
Size
27.74 kB
File Count
115
NPM Version
10.8.2
Node Version
20.19.0
Published on
Apr 11, 2025
Total Downloads
Cumulative downloads
Total Downloads
264,831,668
Last Day
1.5%
107,295
Compared to previous day
Last Week
-11.3%
2,631,462
Compared to previous week
Last Month
4.9%
11,636,117
Compared to previous month
Last Year
52.2%
110,484,619
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
LitElement 3.0
A simple base class for creating fast, lightweight web components.
LitElement is the base class that powers the Lit library for building fast web components. Most users should import LitElement from the lit package rather than installing and importing from the lit-element package directly.
About this release
This is a pre-release of Lit 3.0, the next major version of Lit.
Lit 3.0 has very few breaking changes from Lit 2.0:
- Drops support for IE11
- Published as ES2021
- Removes a couple of deprecated Lit 1.x APIs
Lit 3.0 should require no changes to upgrade from Lit 2.0 for the vast majority of users. Once the full release is published, most apps and libraries will be able to extend their npm version ranges to include both 2.x and 3.x, like "^2.7.0 || ^3.0.0".
Lit 2.x and 3.0 are interoperable: templates, base classes, directives, decorators, etc., from one version of Lit will work with those from another.
Please file any issues you find on our issue tracker.
Documentation
Full documentation is available at lit.dev.
Contributing
Please see CONTRIBUTING.md.
No vulnerabilities found.
Reason
all last 30 commits are reviewed through GitHub
Reason
30 commit(s) out of 30 and 22 issue activity out of 30 found in the last 90 days -- score normalized to 10
Reason
no vulnerabilities detected
Reason
license file detected
Details
- Info: : LICENSE:1
Reason
no binaries found in the repo
Reason
update tool detected
Details
- Info: Dependabot detected
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'force pushes' disabled on branch 'main'
- Info: 'allow deletion' disabled on branch 'main'
- Info: status check found to merge onto on branch 'main'
- Warn: number of required reviewers is only 1 on branch 'main'
Reason
dependency not pinned by hash detected -- score normalized to 7
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/benchmarks.yml:104: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-image.yaml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-image.yaml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release-image.yaml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release-image.yaml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce-ie11.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce-ie11.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/sauce-ie11.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce.yaml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sauce.yaml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/sauce.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/starter-kits.yaml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/starter-kits.yaml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/starter-kits.yaml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:71: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:79: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/tests.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/tests.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: packages/benchmarks/generator/scripts/generate.sh:11
- Info: Dockerfile dependencies are pinned
- Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles
- Info: no insecure (not pinned by hash) dependency downloads found in shell scripts
Reason
no badge detected
Reason
non read-only tokens detected in GitHub workflows
Details
- Warn: no topLevel permission defined: .github/workflows/add-issues-to-project.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/add-issues-to-project.yml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/benchmarks.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/benchmarks.yml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/release-image.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release-image.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/release.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/release.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/sauce-ie11.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce-ie11.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/sauce.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/sauce.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/starter-kits.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/starter-kits.yaml/main?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/tests.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/lithops-cloud/lithopscloud/tests.yml/main?enable=permissions
Reason
dangerous workflow patterns detected
Details
- Warn: script injection with untrusted input ' github.event.pull_request.body ': .github/workflows/release-image.yaml:36
Reason
security policy file not detected
Reason
project is not fuzzed
Score
6
/10
Last Scanned on 2022-08-15
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More