Gathering detailed insights and metrics for prestakit
Gathering detailed insights and metrics for prestakit
Installations
npm install prestakitDeveloper
PrestaShop
Developer Guide
BETA
Module System
Unable to determine the module system for this package.
Min. Node Version
Typescript Support
No
Node Version
16.20.2
NPM Version
8.19.4
Statistics
47 Stars
1,004 Commits
29 Forks
32 Watching
13 Branches
62 Contributors
Updated on 25 Oct 2024
Languages
HTML (69.92%)
SCSS (15.34%)
JavaScript (8.04%)
CSS (3.57%)
MDX (2.94%)
PHP (0.19%)
Total Downloads
Cumulative downloads
Total Downloads
3,938,884
Last day
17.5%
13,544
Compared to previous day
Last week
7.9%
74,518
Compared to previous week
Last month
18%
278,747
Compared to previous month
Last year
111.2%
2,316,476
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
8
Dev Dependencies
39
@babel/cli@babel/core@babel/preset-env@mdx-js/react@storybook/addon-a11y@storybook/addon-docs@storybook/addon-essentials@storybook/addon-links@storybook/builder-webpack5@storybook/html@storybook/manager-webpack5@storybook/react@storybook/themingbabel-loaderbabel-plugin-transform-es2015-modules-stripbabel-preset-envbabel-preset-es2015chromaticcore-jscss-loaderexpose-loaderfile-loaderjqueryjquery-migratemini-css-extract-pluginpopper.jspostcss-cssnextpostcss-loaderpostcss-preset-envpstaggersass-embeddedsass-loaderstyle-loaderstylelintstylelint-config-prestashopterser-webpack-plugintetherwebpackwebpack-cli
Versions
PrestaShop UI Kit
UI Kit integration for PrestaShop – Based on Bootstrap 4.
Installation
Note: If you use PrestaShop, there's no need to install – the UI kit is already installed in PrestaShop.
You can install the UI kit on your project, independently from PrestaShop, using NPM.
npm install --save-dev prestakit
Or use it directly through our CDN:
[...]
<link href="https://ui-kit.prestashop.com/backoffice/latest/css/bootstrap-prestashop-ui-kit.css" rel="stylesheet">
<script src="https://ui-kit.prestashop.com/backoffice/latest/js/prestashop-ui-kit.js"></script>
[...]
Get Started
Include the dependencies: jQuery and Bootstrap PrestaShop UI Kit + Javascript.
[...]
<link href="dist/css/bootstrap-prestashop-ui-kit.css" rel="stylesheet">
<script src="dist/js/prestashop-ui-kit.js"></script>
[...]
Github dev Dependencies
Contributing / Improving the UI Kit
Contributions are welcome!
You can check out an example of most of the included controls in this page. Check out a live example here.
Developing with PrestaShop
You can develop on your local copy of the UI kit and see how the changes work on PrestaShop. Assuming you already have a local copy of PrestaShop and of the UI kit installed on your computer (each on its own directory), here's what you need to do.
Open up admin-dev/themes/new-theme/package.json of your PrestaShop install, and look for "prestakit"
1{ 2 // ... 3 prestakit: "1.2.3"; 4 // ... 5}
Change the version so it looks like this:
1{ 2 prestakit: "/path/to/your/local/ui-kit"; 3}
Go back to to your UI kit folder and run
1npm run watch
In another console, go to admin-dev/themes/new-theme/ of your PrestaShop install, and run:
1npm install && npm run watch
If you keep both instances of NPM running, all your changes in the UI kit will be built automatically, as will your PrestaShop assets.
About PrestaShop
PrestaShop is a free and Open Source e-commerce web application written in PHP, committed to providing the best shopping cart experience for both merchants and customers. Learn more about PrestaShop
License
This UI Kit is released under the OSL-3.0 License.
No vulnerabilities found.
Reason
all changesets reviewed
Reason
no dangerous workflow patterns detected
Reason
16 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
no binaries found in the repo
Reason
packaging workflow detected
Details
- Info: Project packages its releases by way of GitHub Actions.: .github/workflows/release.yml:6
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'develop'
- Info: 'allow deletion' disabled on branch 'master'
- Info: 'force pushes' disabled on branch 'develop'
- Info: 'force pushes' disabled on branch 'master'
- Warn: 'branch protection settings apply to administrators' is disabled on branch 'develop'
- Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'
- Info: 'stale review dismissal' is required to merge on branch 'develop'
- Info: 'stale review dismissal' is required to merge on branch 'master'
- Warn: required approving review count is 1 on branch 'develop'
- Warn: required approving review count is 1 on branch 'master'
- Warn: codeowners review is required - but no codeowners file found in repo
- Warn: codeowners review is required - but no codeowners file found in repo
- Warn: 'last push approval' is disabled on branch 'develop'
- Warn: 'last push approval' is disabled on branch 'master'
- Warn: no status checks found to merge onto branch 'develop'
- Warn: no status checks found to merge onto branch 'master'
- Info: PRs are required in order to make changes on branch 'develop'
- Info: PRs are required in order to make changes on branch 'master'
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/cd.yml:1
- Warn: no topLevel permission defined: .github/workflows/chromatic.yml:1
- Warn: no topLevel permission defined: .github/workflows/dependabot.yml:1
- Warn: no topLevel permission defined: .github/workflows/release.yml:1
- Warn: no topLevel permission defined: .github/workflows/scss.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
license file not detected
Details
- Warn: project does not have a license file
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/PrestaShop/prestashop-ui-kit/cd.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/cd.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/PrestaShop/prestashop-ui-kit/cd.yml/develop?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/cd.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/PrestaShop/prestashop-ui-kit/cd.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromatic.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/PrestaShop/prestashop-ui-kit/chromatic.yml/develop?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/PrestaShop/prestashop-ui-kit/chromatic.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/PrestaShop/prestashop-ui-kit/release.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/PrestaShop/prestashop-ui-kit/release.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scss.yml:8: update your workflow using https://app.stepsecurity.io/secureworkflow/PrestaShop/prestashop-ui-kit/scss.yml/develop?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/scss.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/PrestaShop/prestashop-ui-kit/scss.yml/develop?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/cd.yml:28
- Warn: npmCommand not pinned by hash: .github/workflows/release.yml:16
- Warn: npmCommand not pinned by hash: .github/workflows/scss.yml:18
- Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 2 third-party GitHubAction dependencies pinned
- Info: 0 out of 3 npmCommand dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
30 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-vc8w-jr9v-vj7f
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-257v-vj4p-3w2h
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-w7rc-rwvf-8q5r
- Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-566m-qj78-rww5
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-w5p7-h5w8-2hfq
- Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
- Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
Score
4.9
/10
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More