npmpackage.info

Gathering detailed insights and metrics for pocket-js-core

Gathering detailed insights and metrics for pocket-js-core

pocket-js-core - 0.0.6 | npmpackage.info

pocket-js-core

Complete Pocket Protocol library and implementation in Javascript.

0.0.6

9

MIT

TypeScript

Installations

npm install pocket-js-core

Developer Guide

BETA

Typescript

No

Module System

CommonJS

Node Version

11.6.0

NPM Version

6.5.0

Pull Requests

Open

1

Total

84

Closed

5

Merged

78

Issues

Open

1

Total

28

Closed

27

Releases

10

v2.2.1

Updated on Apr 10, 2024

v2.2.0

Updated on Mar 25, 2024

v2.2.0-rc.5

Updated on Mar 23, 2024

v2.1.1

Updated on Feb 20, 2023

v2.1.0

Updated on Aug 05, 2022

v1.2.0

Updated on Jul 14, 2022

View All 10 releases

Languages

3

TypeScript

JavaScript

Shell

TypeScript (98.93%)

JavaScript (0.59%)

Shell (0.48%)

Developer

pokt-network

Download Statistics

Total Downloads

0

Last Day

0

Last Week

0

Last Month

0

Last Year

0

GitHub Statistics

MIT License

9 Stars

104 Commits

11 Forks

20 Watchers

4 Branches

14 Contributors

Updated on Jan 25, 2025

Maintainers

1

View All 14 Contributors

Package Meta Information

Latest Version

0.0.6

Package Id

pocket-js-core@0.0.6

Size

7.61 kB

NPM Version

6.5.0

Node Version

11.6.0

Published on

Aug 08, 2019

Total Downloads

Cumulative downloads

Total Downloads

NaN

Last Day

0%

NaN

Compared to previous day

Last Week

0%

NaN

Compared to previous week

Last Month

0%

NaN

Compared to previous month

Last Year

0%

NaN

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

1

Dev Dependencies

2

PocketJS Core

Official Javascript client to use with the Pocket Network

Overview

PocketJS Core wraps all of the functionalities a developer will need to create their own plugin to start interacting with the Pocket Network.

Before you can start using the library, you have to get a Developer ID by registering for MVP. To learn how to register please click here.

Requirements

You should have at least have a basic knowledge of blockchain technology and know your way around Javascript. You will also need to install the NPM tool.

Installation

The PocketJS Core package is hosted in NPM, see below how to install.

npm install --save pocket-js-core

Usage

If you would like to know how to create your own plugin from PocketJS Core, check out how to create a plugin.

Contact Us

We have created a Discord server where you can meet with the Pocket team, as well as fellow App Developers, and Service Nodes. Click here to join!

Empty State

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

10

License

Determines if the project has defined a license.

6

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Security-Policy

Determines if the project has published a security policy.

0

Fuzzing

Determines if the project uses fuzzing.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cs.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/pokt-network/pocket-js/cs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cs.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/pokt-network/pocket-js/cs.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/cs.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/pokt-network/pocket-js/cs.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/greetings.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/pokt-network/pocket-js/greetings.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node.js.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/pokt-network/pocket-js/node.js.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/node.js.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/pokt-network/pocket-js/node.js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/node.js.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/pokt-network/pocket-js/node.js.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/pokt-network/pocket-js/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/pokt-network/pocket-js/publish.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/stale.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/pokt-network/pocket-js/stale.yml/main?enable=pin
Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:18
Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 0 out of 1 npmCommand dependencies pinned

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

41 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-x9w5-v3q2-3rhw
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-phwq-j96m-2c2q
Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
Warn: Project is vulnerable to: GHSA-vjh7-7g9h-fjfh
Warn: Project is vulnerable to: GHSA-m5qc-5hw7-8vg7
Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488
Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g
Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6
Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59
Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
Warn: Project is vulnerable to: GHSA-9qxr-qj54-h672
Warn: Project is vulnerable to: GHSA-m4v8-wqvr-p9f7
Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975
Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3
Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q

Score

3.4

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.