Gathering detailed insights and metrics for swagger-jsdoc-webpack-plugin
Gathering detailed insights and metrics for swagger-jsdoc-webpack-plugin
A webpack plugin to generate a swagger.json file from jsdoc
Installations
npm install swagger-jsdoc-webpack-pluginDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Node Version
18.12.1
NPM Version
8.19.2
Score
62.6
Supply Chain
75.8
Quality
73.1
Maintenance
50
Vulnerability
97
License
Releases
5
Languages
3
JavaScript
TypeScript
Shell
JavaScript (89.11%)
TypeScript (8.43%)
Shell (2.46%)
Developer
patsimm
Download Statistics
Total Downloads
178,710
Last Day
138
Last Week
1,375
Last Month
3,992
Last Year
53,316
GitHub Statistics
MIT License
3 Stars
23 Commits
1 Watchers
9 Branches
1 Contributors
Updated on Aug 21, 2023
Bundle Size
494.09 kB
Minified
138.26 kB
Minified + Gzipped
Maintainers
1
Package Meta Information
Latest Version
2.1.0
Package Id
swagger-jsdoc-webpack-plugin@2.1.0
Unpacked Size
4.85 kB
Size
2.13 kB
File Count
5
NPM Version
8.19.2
Node Version
18.12.1
Total Downloads
Cumulative downloads
Total Downloads
178,710
Last Day
2,660%
138
Compared to previous day
Last Week
65.5%
1,375
Compared to previous week
Last Month
-19.6%
3,992
Compared to previous month
Last Year
14.3%
53,316
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Swagger JSDoc Webpack Plugin
Example Usage
webpack.json
1const SwaggerJSDocWebpackPlugin = require('swagger-jsdoc-webpack-plugin'); 2 3module.exports = { 4 ... 5 plugins: [ 6 new SwaggerJSDocWebpackPlugin({ 7 definition: { 8 openapi: '3.0.0', 9 info: { 10 title: 'Title', 11 version: '1.0.0', 12 description: 'Description', 13 }, 14 }, 15 apis: ['./src/routes/**/*.js'], 16 }), 17 ... 18 ], 19 ... 20}
This writes a swagger.json file in your output folder.
Options
outputFile?: string
The path of the generated swagger file. Default: "swagger.json"
swagger-jsdoc options
All other options are directly passed to swagger-jsdoc.
Dependencies
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
dependency not pinned by hash detected -- score normalized to 3
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/patsimm/swagger-jsdoc-webpack-plugin/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/patsimm/swagger-jsdoc-webpack-plugin/release.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/patsimm/swagger-jsdoc-webpack-plugin/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/patsimm/swagger-jsdoc-webpack-plugin/test.yml/master?enable=pin
- Info: 0 out of 4 GitHub-owned GitHubAction dependencies pinned
- Info: 2 out of 2 npmCommand dependencies pinned
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
Found 0/13 approved changesets -- score normalized to 0
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/release.yml:1
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 13 are checked with a SAST tool
Reason
13 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
- Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc
- Warn: Project is vulnerable to: GHSA-hc6q-2mpp-qw7j
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
Score
3
/10
Last Scanned on 2025-06-23
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More