npmpackage.info

Gathering detailed insights and metrics for svelte

Other packages similar to svelte

@cspell/dict-svelte

1.0.6

Svelte dictionary for cspell.

svelte-fa

4.0.3

Tiny FontAwesome component for Svelte

svelte-preprocess

6.0.3

A Svelte preprocessor wrapper with baked-in support for commonly used preprocessors

svelte-check

4.1.4

Svelte Code Checker Terminal Interface

svelte

web development for the rest of us

5.18.0

80,911

MIT

JavaScript

9.93 kB

188,132,928 5.4

Installations

npm install svelte

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Min. Node Version

>=18

Node Version

18.20.5

NPM Version

10.8.2 Score

93.6

Supply Chain

83.5

Quality

97.6

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

31

Total

6,558

Closed

1,152

Merged

5,375

Issues

Open

743

Total

7,834

Closed

7,091

Releases

379

svelte@5.18.0

Published on 15 Jan 2025

svelte@5.17.5

Published on 14 Jan 2025

svelte@5.17.4

Published on 13 Jan 2025

svelte@5.17.3

Published on 09 Jan 2025

svelte@5.17.2

Published on 09 Jan 2025

svelte@5.17.1

Published on 08 Jan 2025

View all 379 releases

Contributors

751

View all 751 contributors

Languages

JavaScript

Svelte

TypeScript

CSS

HTML

JavaScript (72.33%)

Svelte (21.95%)

TypeScript (3.92%)

CSS (1.34%)

HTML (0.47%)

Developer

sveltejs

Download Statistics

Total Downloads

188,132,928

Last Day

383,845

Last Week

1,969,331

Last Month

6,879,541

Last Year

64,720,085

GitHub Statistics

80,911 Stars

9,909 Commits

4,326 Forks

847 Watching

109 Branches

751 Contributors

Bundle Size

26.51 kB

Minified

9.93 kB

Minified + Gzipped

Bundlephobia

Maintainers

Package Meta Information

Latest Version

5.18.0

Package Id

svelte@5.18.0

Unpacked Size

2.37 MB

Size

604.49 kB

File Count

378

NPM Version

10.8.2

Node Version

18.20.5

Publised On

15 Jan 2025

Total Downloads

Cumulative downloads

Total Downloads

188,132,928

Last day

3.7%

383,845

Compared to previous day

Last week

14%

1,969,331

Compared to previous week

Last month

-16.6%

6,879,541

Compared to previous month

Last year

49.6%

64,720,085

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Versions

What is Svelte?

Svelte is a new way to build web applications. It's a compiler that takes your declarative components and converts them into efficient JavaScript that surgically updates the DOM.

Learn more at the Svelte website, or stop by the Discord chatroom.

Getting started

You can play around with Svelte in the tutorial, examples, and REPL.

When you're ready to build a full-fledge application, we recommend using SvelteKit:

1npx sv create my-app
2cd my-app
3npm install
4npm run dev

See the SvelteKit documentation to learn more.

Changelog

The Changelog for this package is available on GitHub.

Supporting Svelte

Svelte is an MIT-licensed open source project with its ongoing development made possible entirely by fantastic volunteers. If you'd like to support their efforts, please consider:

Becoming a backer on Open Collective.

Funds donated via Open Collective will be used for compensating expenses related to Svelte's development.

Stable Version

5.18.0

MODERATE

5.4/10

Summary

Svelte has a potential mXSS vulnerability due to improper HTML escaping

Affected Versions

< 4.2.19

Patched Versions

4.2.19

MODERATE

6.1/10

Summary

Svelte vulnerable to XSS when using objects during server-side rendering

Affected Versions

< 3.49.0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-preview-create-request.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/docs-preview-create-request.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/docs-preview-delete-request.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/docs-preview-delete-request.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:48: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new-comment.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new-comment.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new-comment.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new-comment.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/sync-request.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/sync-request.yml/main?enable=pin
Info: 0 out of 17 GitHub-owned GitHubAction dependencies pinned
Info: 1 out of 9 third-party GitHubAction dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

5.4

/10

Last Scanned on 2025-01-06

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to svelte

svelte

Installations

Developer Guide

Yes

ESM

>=18

18.20.5

10.8.2

Score

Pull Requests

31

6,558

1,152

5,375

Issues

743

7,834

7,091

Releases

Contributors

Languages

Developer

Download Statistics

GitHub Statistics

Bundle Size

26.51 kB

9.93 kB

Maintainers

Package Meta Information

Total Downloads

188,132,928

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

What is Svelte?

Getting started

Changelog

Supporting Svelte

Stable Version

5.18.0

MODERATE

10

10

10

10

10

6

0

0

0

0

0

0

5.4

/10