Gathering detailed insights and metrics for protobufjs-no-cli
Gathering detailed insights and metrics for protobufjs-no-cli
Installations
npm install protobufjs-no-cliDeveloper Guide
BETA
Typescript
No
Module System
CommonJS, UMD
Min. Node Version
>=0.8
Node Version
4.4.3
NPM Version
3.10.8
Releases
54
protobufjs: v7.5.3
protobufjs-v7.5.3
Updated on May 28, 2025
protobufjs: v7.5.2
protobufjs-v7.5.2
Updated on May 14, 2025
protobufjs: v7.5.1
protobufjs-v7.5.1
Updated on May 08, 2025
protobufjs: v7.5.0
protobufjs-v7.5.0
Updated on Apr 15, 2025
protobufjs-cli: v1.2.0
protobufjs-cli-v1.2.0
Updated on Apr 15, 2025
protobufjs: v7.4.0
protobufjs-v7.4.0
Updated on Aug 22, 2024
Languages
2
JavaScript
TypeScript
JavaScript (99.78%)
TypeScript (0.22%)
Developer
dcodeIO
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
NOASSERTION License
10,277 Stars
942 Commits
1,437 Forks
170 Watchers
38 Branches
109 Contributors
Updated on Jul 12, 2025
Maintainers
1
Package Meta Information
Latest Version
5.0.1
Package Id
protobufjs-no-cli@5.0.1
Size
376.81 kB
NPM Version
3.10.8
Node Version
4.4.3
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
Dev Dependencies
5
About protobufjs-no-cli
Our project only needs to use the loadProto API from protobufjs, not the CLI. The ascli package uses strange @latest dependencies which trigger some bugs in npm. So this package lets us depend on protobufjs without pulling in the ascli dependency.
A PR to fix ascli is at https://github.com/dcodeIO/ascli/pull/2
The underlying bug seems to be tracked at https://github.com/npm/npm/issues/13642
Protocol Buffers are a language-neutral, platform-neutral, extensible way of serializing structured data for use in communications protocols, data storage, and more, originally designed at Google (see).
protobuf.js is a pure JavaScript implementation on top of bytebuffer.js including a .proto parser, message class building and simple encoding and decoding. There is no compilation step required, it's super easy to use and it works out of the box on .proto files!
Getting started
- Step 1: Become familar with Google's Protocol Buffers (protobuf)
- Step 2: Head straight to our wiki for up to date usage information, changes and examples
- Step 3: Build something cool! :-)
Features
- RequireJS/AMD compatible
- node.js/CommonJS compatible, also available via npm
- Browser compatible
- Closure Compiler compatible (fully annotated, externs)
- Fully documented using jsdoc3
- Well tested through test.js
- bytebuffer.js is the only production dependency
- Fully compatible to the official implementation including advanced features
- proto2js command line utility
Documentation
Tests
Downloads
CDN usage
1<script src="//cdn.rawgit.com/dcodeIO/protobuf.js/VERSION/dist/protobuf.js"></script>
With VERSION replaced by a valid tag or just master for testing
the latest master build.
Contributors
Daniel Wirtz (maintainer), Frank Xu, Dretch, shirmin, Nikolai Vavilov
License: Apache License, Version 2.0 - Logo derived from W3C HTML5 Logos (CC A 3.0)
No vulnerabilities found.
Reason
25 commit(s) out of 30 and 0 issue activity out of 30 found in the last 90 days -- score normalized to 10
Reason
all last 30 commits are reviewed through GitHub
Reason
no vulnerabilities detected
Reason
update tool detected
Details
- Info: Renovabot detected: renovate.json:1
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: : LICENSE:1
Reason
no binaries found in the repo
Reason
dependency not pinned by hash detected -- score normalized to 7
Details
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yaml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/buggy1985/twitter-share-count/release.yaml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/buggy1985/twitter-share-count/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/buggy1985/twitter-share-count/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/buggy1985/twitter-share-count/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/buggy1985/twitter-share-count/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/buggy1985/twitter-share-count/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/buggy1985/twitter-share-count/test.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:34
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:47
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:18
- Info: Dockerfile dependencies are pinned
- Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles
- Info: no insecure (not pinned by hash) dependency downloads found in shell scripts
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'force pushes' disabled on branch 'master'
- Info: 'allow deletion' disabled on branch 'master'
- Warn: no status checks found to merge onto branch 'master'
- Warn: number of required reviewers is only 1 on branch 'master'
- Warn: branch protection not enabled for branch 'ProtoBuf5'
Reason
no badge detected
Reason
non read-only tokens detected in GitHub workflows
Details
- Warn: no topLevel permission defined: .github/workflows/release.yaml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/buggy1985/twitter-share-count/release.yaml/master?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/test.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/buggy1985/twitter-share-count/test.yml/master?enable=permissions
Reason
security policy file not detected
Reason
project is not fuzzed
Score
6.6
/10
Last Scanned on 2022-08-15
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More