npmpackage.info

Gathering detailed insights and metrics for svelte

Other packages similar to svelte

prettier-plugin-svelte

3.4.0

Svelte plugin for prettier

@cspell/dict-svelte

1.0.6

Svelte dictionary for cspell.

svelte-check

4.2.1

Svelte Code Checker Terminal Interface

@ai-sdk/svelte

2.1.12

[Svelte](https://svelte.dev/) UI components for the [AI SDK](https://ai-sdk.dev/docs):

Gathering detailed insights and metrics for svelte

svelte - 5.33.11 | npmpackage.info

svelte

web development for the rest of us

5.33.11

82,865

MIT

JavaScript

147.00 B

223,674,948 5.3

Installations

npm install svelte

Developer Guide

BETA

Typescript

Yes

Module System

ESM

Min. Node Version

>=18

Node Version

18.20.8

NPM Version

10.8.2 Score

98.4

Supply Chain

84.8

Quality

97.6

Maintenance

100

Vulnerability

100

License

Pull Requests

Open

29

Total

7,013

Closed

1,231

Merged

5,753

Issues

Open

764

Total

8,249

Closed

7,485

Releases

460

svelte@5.33.11

Updated on May 31, 2025

svelte@5.33.10

Updated on May 29, 2025

svelte@5.33.9

Updated on May 29, 2025

svelte@5.33.8

Updated on May 29, 2025

svelte@5.33.7

Updated on May 29, 2025

svelte@5.33.6

Updated on May 29, 2025

View All 460 releases

Languages

JavaScript

Svelte

TypeScript

CSS

HTML

JavaScript (72.36%)

Svelte (21.86%)

TypeScript (3.97%)

CSS (1.34%)

HTML (0.48%)

Developer

sveltejs

Download Statistics

Total Downloads

223,674,948

Last Day

140,607

Last Week

1,751,058

Last Month

7,327,839

Last Year

81,072,498

GitHub Statistics

MIT License

82,865 Stars

10,282 Commits

4,531 Forks

851 Watchers

131 Branches

787 Contributors

Updated on Jun 01, 2025

Bundle Size

169.00 B

Minified

147.00 B

Minified + Gzipped

Bundlephobia

Maintainers

View All 787 Contributors

Package Meta Information

Latest Version

5.33.11

Package Id

svelte@5.33.11

Unpacked Size

2.37 MB

Size

606.28 kB

File Count

361

NPM Version

10.8.2

Node Version

18.20.8

Published on

May 31, 2025

Total Downloads

Cumulative downloads

Total Downloads

223,674,948

Last Day

15.3%

140,607

Compared to previous day

Last Week

-3.7%

1,751,058

Compared to previous week

Last Month

-1.5%

7,327,839

Compared to previous month

Last Year

53.9%

81,072,498

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Svelte - web development for the rest of us

What is Svelte?

Svelte is a new way to build web applications. It's a compiler that takes your declarative components and converts them into efficient JavaScript that surgically updates the DOM.

Learn more at the Svelte website, or stop by the Discord chatroom.

Getting started

You can play around with Svelte in the tutorial, examples, and REPL.

When you're ready to build a full-fledge application, we recommend using SvelteKit:

1npx sv create my-app
2cd my-app
3npm install
4npm run dev

See the SvelteKit documentation to learn more.

Changelog

The Changelog for this package is available on GitHub.

Supporting Svelte

Svelte is an MIT-licensed open source project with its ongoing development made possible entirely by fantastic volunteers. If you'd like to support their efforts, please consider:

Becoming a backer on Open Collective.

Funds donated via Open Collective will be used for compensating expenses related to Svelte's development.

Moderate

5.4/10

Summary

Svelte has a potential mXSS vulnerability due to improper HTML escaping

Affected Versions

< 4.2.19

Patched Versions

4.2.19

Moderate

6.1/10

Summary

Svelte vulnerable to XSS when using objects during server-side rendering

Affected Versions

< 3.49.0

Patched Versions

3.49.0

10

Maintained

Determines if the project is "actively maintained".

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

9

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

7

SAST

Determines if the project uses static code analysis.

1

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Security-Policy

Determines if the project has published a security policy.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ci.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ecosystem-ci-trigger.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ecosystem-ci-trigger.yml:70: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/ecosystem-ci-trigger.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pkg.pr.new-comment.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new-comment.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new-comment.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new-comment.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new-comment.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new-comment.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/pkg.pr.new.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/pkg.pr.new.yml:37: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/pkg.pr.new.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/sveltejs/svelte/release.yml/main?enable=pin
Info: 0 out of 17 GitHub-owned GitHubAction dependencies pinned
Info: 1 out of 10 third-party GitHubAction dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

Score

5.3

/10

Last Scanned on 2025-05-26

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to svelte

Other packages similar to svelte

svelte

Installations

Developer Guide

Yes

ESM

>=18

18.20.8

10.8.2

Score

Pull Requests

29

7,013

1,231

5,753

Issues

764

8,249

7,485

Releases

Languages

Developer

Download Statistics

GitHub Statistics

Bundle Size

169.00 B

147.00 B

Maintainers

Package Meta Information

Total Downloads

223,674,948

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Dev Dependencies

What is Svelte?

Getting started

Changelog

Supporting Svelte

10

10

10

10

9

7

1

0

0

0

0

0

5.3

/10