Gathering detailed insights and metrics for mailparser
Gathering detailed insights and metrics for mailparser
Installations
npm install mailparserScore
56.4
Supply Chain
75.5
Quality
80.2
Maintenance
100
Vulnerability
98.9
License
Releases
6
Contributors
61
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?v=4){kind=avatar}
Developer
nodemailer
Developer Guide
BETA
Module System
CommonJS
Min. Node Version
Typescript Support
No
Node Version
18.20.2
NPM Version
10.5.0
Statistics
1,592 Stars
389 Commits
281 Forks
42 Watching
3 Branches
61 Contributors
Updated on 21 Nov 2024
Bundle Size
1.20 MB
Minified
484.44 kB
Minified + Gzipped
Languages
JavaScript (99.92%)
Shell (0.08%)
Total Downloads
Cumulative downloads
Total Downloads
126,545,338
Last day
-6.3%
143,978
Compared to previous day
Last week
1.5%
840,811
Compared to previous week
Last month
5.6%
3,535,614
Compared to previous month
Last year
24.1%
38,725,101
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Versions
mailparser
Advanced email parser for Node.js. Everything is handled as a stream which should make it able to parse even very large messages (100MB+) with relatively low overhead.
Looking for a front-end solution?
mailparser is Node.js only library, so you can't use it reliably in the front-end or bundle with WebPack. If you do need a solution to parse emails in the front-end then use PostalMime.
Installation
First install the module from npm:
$ npm install mailparser
next import the mailparser object into your script:
1const mailparser = require('mailparser');
Usage
See mailparser homepage for documentation and terms.
License
Licensed under MIT
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
no dangerous workflow patterns detected
Reason
packaging workflow detected
Details
- Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yaml:13
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
5 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m / GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Reason
Found 8/22 approved changesets -- score normalized to 3
Reason
0 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 2
Reason
dependency not pinned by hash detected -- score normalized to 2
Details
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/nodemailer/mailparser/release.yaml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/nodemailer/mailparser/release.yaml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yaml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/nodemailer/mailparser/release.yaml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/nodemailer/mailparser/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/nodemailer/mailparser/test.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:21
- Info: 0 out of 4 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 third-party GitHubAction dependencies pinned
- Info: 1 out of 2 npmCommand dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: topLevel 'contents' permission set to 'write': .github/workflows/release.yaml:7
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 16 are checked with a SAST tool
Score
4.3
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More