Gathering detailed insights and metrics for rxjs
Gathering detailed insights and metrics for rxjs
Installations
npm install rxjsScore
93.6
Supply Chain
100
Quality
81.6
Maintenance
100
Vulnerability
100
License
Releases
2
Contributors
552
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4){kind=avatar}
Developer
Developer Guide
BETA
Module System
CommonJS, ESM
Min. Node Version
Typescript Support
Yes
Node Version
18.12.1
NPM Version
9.2.0
Statistics
30,823 Stars
5,460 Commits
3,005 Forks
447 Watching
17 Branches
552 Contributors
Updated on 28 Nov 2024
Languages
TypeScript (90.76%)
JavaScript (5.74%)
SCSS (2.13%)
HTML (1.12%)
Shell (0.25%)
Total Downloads
Cumulative downloads
Total Downloads
9,357,390,141
Last day
-8.2%
8,730,535
Compared to previous day
Last week
0.7%
50,992,007
Compared to previous week
Last month
14.6%
210,963,507
Compared to previous month
Last year
-5%
2,195,739,015
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
Dev Dependencies
61
@angular-devkit/build-optimizer@angular-devkit/schematics@swc/core@swc/helpers@types/chai@types/lodash@types/mocha@types/node@types/shelljs@types/sinon@types/sinon-chai@types/source-map@typescript-eslint/eslint-plugin@typescript-eslint/parserbabel-polyfillchaicheck-side-effectscolorcolorscross-envcz-conventional-changelogdependency-cruiserescape-string-regexpeslinteslint-plugin-jasmineform-datafs-extraglobgoogle-closure-compiler-jshuskyklaw-synclint-stagedlodashminimistmochanodemonnpm-run-allopn-cliplatformprettierpromiserolluprollup-plugin-aliasrollup-plugin-injectrollup-plugin-node-resolveshelljsshxsinonsinon-chaisource-map-supportsystemjsts-nodetslinttslint-config-prettiertslint-etctslint-no-toplevel-property-accesstslint-no-unused-expression-chaitypescriptvalidate-commit-msgweb-streams-polyfillwebpack
Versions
RxJS: Reactive Extensions For JavaScript
RxJS 8 Monorepo
Look for RxJS and related packages under the /packages directory. Applications like the rxjs.dev documentation site are under the /apps directory.
Reactive Extensions Library for JavaScript. This is a rewrite of Reactive-Extensions/RxJS and is the latest production-ready version of RxJS. This rewrite is meant to have better performance, better modularity, better debuggable call stacks, while staying mostly backwards compatible, with some breaking changes that reduce the API surface.
Versions In This Repository
- master - This is all of the current work, which is against v8 of RxJS right now
- 7.x - This is the branch for version 7.X
- 6.x - This is the branch for version 6.X
Most PRs should be made to master.
Important
By contributing or commenting on issues in this repository, whether you've read them or not, you're agreeing to the Contributor Code of Conduct. Much like traffic laws, ignorance doesn't grant you immunity.
Development
Because of this issue we're using yarn. (Basically the docs app uses @types/jasmine, and the package uses @types/mocha and they get hoisted to the top level by npm install with workspaces, and then TypeScript vomits everywhere when you try to build).
cdto the repository rootyarn installto install all dependenciesyarn workspace rxjs testwill run the RxJS test suiteyarn workspace rxjs.dev startwill start the rxjs.dev documentation site local development server
No vulnerabilities found.
Reason
8 commit(s) out of 30 and 8 issue activity out of 30 found in the last 90 days -- score normalized to 10
Reason
no vulnerabilities detected
Reason
license file detected
Details
- Info: : LICENSE.txt:1
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
update tool detected
Details
- Info: Dependabot detected
Reason
GitHub code reviews found for 29 commits out of the last 30 -- score normalized to 9
Details
- Warn: no reviews found for commit: 718be5bb8db5bb07ec9e4da8b5741e579bba6e62
Reason
dependency not pinned by hash detected -- score normalized to 5
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_main.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/kalessine/sdmx-sax-parser/ci_main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_main.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kalessine/sdmx-sax-parser/ci_main.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_ts_latest.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/kalessine/sdmx-sax-parser/ci_ts_latest.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci_ts_latest.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/kalessine/sdmx-sax-parser/ci_ts_latest.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/rebase.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/kalessine/sdmx-sax-parser/rebase.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/rebase.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/kalessine/sdmx-sax-parser/rebase.yml/master?enable=pin
- Warn: containerImage not pinned by hash: Dockerfile:1: pin your Docker image by updating node to node@sha256:a6f295c2354992f827693a2603c8b9b5b487db4da0714f5913a917ed588d6d41
- Warn: npmCommand not pinned by hash: .github/workflows/ci_main.yml:24
- Warn: npmCommand not pinned by hash: .github/workflows/ci_ts_latest.yml:24
- Warn: npmCommand not pinned by hash: .github/workflows/ci_ts_latest.yml:26
- Info: no insecure (not pinned by hash) dependency downloads found in Dockerfiles
- Info: no insecure (not pinned by hash) dependency downloads found in shell scripts
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'force pushes' disabled on branch 'master'
- Info: 'allow deletion' disabled on branch 'master'
- Info: status check found to merge onto on branch 'master'
- Warn: number of required reviewers is only 0 on branch 'master'
Reason
no badge detected
Reason
non read-only tokens detected in GitHub workflows
Details
- Warn: no topLevel permission defined: .github/workflows/ci_main.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kalessine/sdmx-sax-parser/ci_main.yml/master?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/ci_ts_latest.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kalessine/sdmx-sax-parser/ci_ts_latest.yml/master?enable=permissions
- Warn: no topLevel permission defined: .github/workflows/rebase.yml:1: update your workflow using https://app.stepsecurity.io/secureworkflow/kalessine/sdmx-sax-parser/rebase.yml/master?enable=permissions
Reason
project is not fuzzed
Reason
security policy file not detected
Score
6.5
/10
Last Scanned on 2022-08-15
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More