Gathering detailed insights and metrics for open
Gathering detailed insights and metrics for open
Gathering detailed insights and metrics for open
Gathering detailed insights and metrics for open
Open stuff like URLs, files, executables. Cross-platform.
npm install open
Typescript
Module System
Min. Node Version
Node Version
NPM Version
98.9
Supply Chain
99.5
Quality
80.3
Maintenance
100
Vulnerability
100
License
JavaScript (96.34%)
TypeScript (3.66%)
Total Downloads
6,750,590,292
Last Day
2,346,614
Last Week
46,351,267
Last Month
200,314,534
Last Year
2,017,781,971
MIT License
3,295 Stars
203 Commits
253 Forks
29 Watchers
1 Branches
56 Contributors
Updated on Jun 27, 2025
Latest Version
10.1.2
Package Id
open@10.1.2
Unpacked Size
55.17 kB
Size
15.36 kB
File Count
6
NPM Version
10.9.2
Node Version
23.6.1
Published on
May 01, 2025
Cumulative downloads
Total Downloads
Last Day
-3.8%
2,346,614
Compared to previous day
Last Week
-8%
46,351,267
Compared to previous week
Last Month
2.5%
200,314,534
Compared to previous month
Last Year
12.3%
2,017,781,971
Compared to previous year
4
Open stuff like URLs, files, executables. Cross-platform.
This is meant to be used in command-line tools and scripts, not in the browser.
If you need this for Electron, use shell.openPath()
instead.
This package does not make any security guarantees. If you pass in untrusted input, it's up to you to properly sanitize it.
spawn
instead of exec
.node-open
issues.xdg-open
script for Linux.1npm install open
Warning: This package is native ESM and no longer provides a CommonJS export. If your project uses CommonJS, you will have to convert to ESM or use the dynamic import()
function. Please don't open issues for questions regarding CommonJS / ESM.
1import open, {openApp, apps} from 'open'; 2 3// Opens the image in the default image viewer and waits for the opened app to quit. 4await open('unicorn.png', {wait: true}); 5console.log('The image viewer app quit'); 6 7// Opens the URL in the default browser. 8await open('https://sindresorhus.com'); 9 10// Opens the URL in a specified browser. 11await open('https://sindresorhus.com', {app: {name: 'firefox'}}); 12 13// Specify app arguments. 14await open('https://sindresorhus.com', {app: {name: 'google chrome', arguments: ['--incognito']}}); 15 16// Opens the URL in the default browser in incognito mode. 17await open('https://sindresorhus.com', {app: {name: apps.browserPrivate}}); 18 19// Open an app. 20await openApp('xcode'); 21 22// Open an app with arguments. 23await openApp(apps.chrome, {arguments: ['--incognito']});
It uses the command open
on macOS, start
on Windows and xdg-open
on other platforms.
Returns a promise for the spawned child process. You would normally not need to use this for anything, but it can be useful if you'd like to attach custom event listeners or perform other operations directly on the spawned process.
Type: string
The thing you want to open. Can be a URL, file, or executable.
Opens in the default app for the file type. For example, URLs opens in your default browser.
Type: object
Type: boolean
Default: false
Wait for the opened app to exit before fulfilling the promise. If false
it's fulfilled immediately when opening the app.
Note that it waits for the app to exit, not just for the window to close.
On Windows, you have to explicitly specify an app for it to be able to wait.
Type: boolean
Default: false
Do not bring the app to the foreground.
Type: boolean
Default: false
Open a new instance of the app even it's already running.
A new instance is always opened on other platforms.
Type: {name: string | string[], arguments?: string[]} | Array<{name: string | string[], arguments: string[]}>
Specify the name
of the app to open the target
with, and optionally, app arguments
. app
can be an array of apps to try to open and name
can be an array of app names to try. If each app fails, the last error will be thrown.
The app name is platform dependent. Don't hard code it in reusable modules. For example, Chrome is google chrome
on macOS, google-chrome
on Linux and chrome
on Windows. If possible, use apps
which auto-detects the correct binary to use.
You may also pass in the app's full path. For example on WSL, this can be /mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe
for the Windows installation of Chrome.
The app arguments
are app dependent. Check the app's documentation for what arguments it accepts.
Type: boolean
Default: false
Allow the opened app to exit with nonzero exit code when the wait
option is true
.
We do not recommend setting this option. The convention for success is exit code zero.
Open an app.
Returns a promise for the spawned child process. You would normally not need to use this for anything, but it can be useful if you'd like to attach custom event listeners or perform other operations directly on the spawned process.
Type: string
The app name is platform dependent. Don't hard code it in reusable modules. For example, Chrome is google chrome
on macOS, google-chrome
on Linux and chrome
on Windows. If possible, use apps
which auto-detects the correct binary to use.
You may also pass in the app's full path. For example on WSL, this can be /mnt/c/Program Files (x86)/Google/Chrome/Application/chrome.exe
for the Windows installation of Chrome.
Type: object
Same options as open
except app
and with the following additions:
Type: string[]
Default: []
Arguments passed to the app.
These arguments are app dependent. Check the app's documentation for what arguments it accepts.
An object containing auto-detected binary names for common apps. Useful to work around cross-platform differences.
1import open, {apps} from 'open'; 2 3await open('https://google.com', { 4 app: { 5 name: apps.chrome 6 } 7});
browser
and browserPrivate
can also be used to access the user's default browser through default-browser
.
chrome
- Web browserfirefox
- Web browseredge
- Web browserbrowser
- Default web browserbrowserPrivate
- Default web browser in incognito modebrowser
and browserPrivate
only supports chrome
, firefox
, and edge
.
0/10
Summary
Command Injection in open
Affected Versions
< 6.0.0
Patched Versions
6.0.0
Reason
security policy file detected
Details
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
0 existing vulnerabilities detected
Reason
license file detected
Details
Reason
5 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 4
Reason
Found 10/30 approved changesets -- score normalized to 3
Reason
detected GitHub workflow tokens with excessive permissions
Details
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
Reason
branch protection not enabled on development/release branches
Details
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
Score
Last Scanned on 2025-06-23
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More