npmpackage.info

NPM was acquired by GitHub in March 2020.

svelte

Cybernetically enhanced web apps

4.2.19

78,194

MIT

JavaScript

2.67 kB

158,913,426

4.7

Installations

npm install svelte

Score

97.1

Supply Chain Risk

84.3

Quality

97.7

Maintenance

100

Vulnerability

Pull Requests

Open

54

Total

5,754

Closed

1,020

Merged

4,680

Issues

Open

814

Total

6,986

Closed

6,172

Releases

268

svelte@5.0.0-next.244

Published on 05 Sept 2024

svelte@5.0.0-next.243

Published on 02 Sept 2024

svelte@5.0.0-next.242

Published on 30 Aug 2024

svelte@5.0.0-next.241

Published on 28 Aug 2024

svelte@5.0.0-next.240

Published on 27 Aug 2024

svelte@5.0.0-next.239

Published on 26 Aug 2024

View all 268 releases

Contributors

703

View all 703 contributors

Developer

sveltejs

Statistics

78,194 Stars

9,214 Commits

4,085 Forks

848 Watching

95 Branches

703 Contributors

Updated on 09 Sept 2024

Bundle Size

6.79 kB

Minified

2.67 kB

Minified + Gzipped

Bundlephobia

Languages

JavaScript (70.45%)

Svelte (23.84%)

TypeScript (3.86%)

CSS (1.16%)

HTML (0.7%)

Total Downloads

Cumulative downloads

Total Downloads

158,913,426

Last day

-14.5%

75,079

Compared to previous day

Last week

1.9%

1,257,370

Compared to previous week

Last month

1.1%

5,012,847

Compared to previous month

Last year

-40.4%

49,884,072

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Versions

What is Svelte?

Svelte is a new way to build web applications. It's a compiler that takes your declarative components and converts them into efficient JavaScript that surgically updates the DOM.

Learn more at the Svelte website, or stop by the Discord chatroom.

Supporting Svelte

Svelte is an MIT-licensed open source project with its ongoing development made possible entirely by fantastic volunteers. If you'd like to support their efforts, please consider:

Becoming a backer on Open Collective.

Funds donated via Open Collective will be used for compensating expenses related to Svelte's development such as hosting costs. If sufficient donations are received, funds may also be used to support Svelte's development more directly.

Roadmap

You may view our roadmap if you'd like to see what we're currently working on.

Contributing

Please see the Contributing Guide and the svelte package for information on contributing to Svelte.

svelte.dev

The source code for https://svelte.dev lives in the sites folder, with all the documentation right here. The site is built with SvelteKit.

Is svelte.dev down?

Probably not, but it's possible. If you can't seem to access any .dev sites, check out this SuperUser question and answer.

License

MIT

10

Maintained

Determines if the project is "actively maintained".

10

License

Determines if the project has defined a license.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

8

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

5

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

1

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 1

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Info: 0 out of 11 GitHub-owned GitHubAction dependencies pinned
Info: 1 out of 6 third-party GitHubAction dependencies pinned

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

0

Fuzzing

Determines if the project uses fuzzing.

Score

4.7

/10

Last Scanned on 2024-09-02

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to svelte

eslint-plugin-svelte

2.43.0

ESLint plugin for Svelte using AST

hast-util-to-jsx-runtime

2.3.0

hast utility to transform to preact, react, solid, svelte, vue, etc

3.3.30

Vercel AI SDK - The AI Toolkit for TypeScript and JavaScript

svelte-preprocess

6.0.2

A Svelte preprocessor wrapper with baked-in support for commonly used preprocessors

svelte

Installations

Score

Pull Requests

54

5,754

1,020

4,680

Issues

814

6,986

6,172

Releases

Contributors

Developer

Statistics

Bundle Size

6.79 kB

2.67 kB

Languages

Total Downloads

158,913,426

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

What is Svelte?

Supporting Svelte

Roadmap

Contributing

svelte.dev

Is svelte.dev down?

License

10

10

10

10

8

5

1

0

0

0

0

0

0

4.7

/10

Other packages similar to svelte