Gathering detailed insights and metrics for tfjs-node-lambda-releases
Gathering detailed insights and metrics for tfjs-node-lambda-releases
Installations
npm install tfjs-node-lambda-releasesDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
14.21.1
NPM Version
6.14.17
Score
54
Supply Chain
73.4
Quality
76.2
Maintenance
100
Vulnerability
100
License
Releases
52
Contributors
1
Unable to fetch Contributors
Languages
1
JavaScript
JavaScript (100%)
Developer
Download Statistics
Total Downloads
34,210
Last Day
10
Last Week
112
Last Month
813
Last Year
11,668
GitHub Statistics
8 Stars
215 Commits
2 Watching
2 Branches
1 Contributors
Bundle Size
216.00 B
Minified
164.00 B
Minified + Gzipped
Maintainers
1
Package Meta Information
Latest Version
2.0.32
Package Id
tfjs-node-lambda-releases@2.0.32
Unpacked Size
3.25 kB
Size
1.32 kB
File Count
4
NPM Version
6.14.17
Node Version
14.21.1
Total Downloads
Cumulative downloads
Total Downloads
34,210
Last day
-41.2%
10
Compared to previous day
Last week
-51.3%
112
Compared to previous week
Last month
-9.2%
813
Compared to previous month
Last year
2.1%
11,668
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
No dependencies detected.
Versions
THIS PACKAGE IS SOFT-DEPRECATED
†tfjs-node-lambda-releases is soft deprecated. Due to file size limitations, 6 releases are too big to be published on npm. Use the assets on GitHub Releases instead.
The last “official” release was v1.6.7 with:
- nodejs10.x-tf1.7.4.br
- nodejs10.x-tf2.8.5.br
- nodejs12.x-tf1.7.4.br
- nodejs12.x-tf2.8.5.br
No changes or migrations are required with:
tfjs-node-lambda-releases
This package only contains the releases for tfjs-node-lambda. A release is the @tensorflow/tfjs-node package and its dependencies compiled and exported for AWS Lambda Node, which is bundled with tar and then compressed with brotli (highest quality).
See the GitHub repository for version information. This package will always contain a matrix of the currently supported AWS Lambda Node environments and the @tensorflow/tfjs-node latest major versions.
Example matrix:
1{ 2 "lambda": ["nodejs10.x", "nodejs12.x"], 3 "tensorflow": ["1.7.4", "2.8.5", "3.0.0"] 4}
Example releases:
nodejs10.x-tf1.7.4.br
nodejs10.x-tf2.8.5.br
nodejs10.x-tf3.0.0.br
nodejs12.x-tf1.7.4.br
nodejs12.x-tf2.8.5.br
nodejs12.x-tf3.0.0.br
Using GitHub actions, these versions are updated daily around midnight. Lock your versions with the --save-exact flag.
Installation
1npm install --save --save-exact tfjs-node-lambda tfjs-node-lambda-helpers 2npm install --save-dev --save-exact @tensorflow/tfjs-node @tensorflow/tfjs
Related libraries
Contributing
We welcome contributions!
†tfjs-node-lambda-releases is soft deprecated. Due to file size limitations, 6 releases are too big to be published on npm. Use the assets on GitHub Releases instead.
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE.md:0
- Info: FSF or OSI recognized license: MIT License: LICENSE.md:0
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
Found 0/30 approved changesets -- score normalized to 0
Reason
no SAST tool detected
Details
- Warn: no pull requests merged into dev branch
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/check-upstream.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish.yml:1
- Info: no jobLevel write permissions found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-upstream.yml:14: update your workflow using https://app.stepsecurity.io/secureworkflow/jlarmstrongiv/tfjs-node-lambda/check-upstream.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/jlarmstrongiv/tfjs-node-lambda/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:50: update your workflow using https://app.stepsecurity.io/secureworkflow/jlarmstrongiv/tfjs-node-lambda/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/jlarmstrongiv/tfjs-node-lambda/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:87: update your workflow using https://app.stepsecurity.io/secureworkflow/jlarmstrongiv/tfjs-node-lambda/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/jlarmstrongiv/tfjs-node-lambda/publish.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:96: update your workflow using https://app.stepsecurity.io/secureworkflow/jlarmstrongiv/tfjs-node-lambda/publish.yml/main?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/publish.yml:56
- Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'main'
Reason
Project has not signed or included provenance with any releases.
Details
- Warn: release artifact v2.0.32 not signed: https://api.github.com/repos/jlarmstrongiv/tfjs-node-lambda/releases/87835546
- Warn: release artifact v2.0.31 not signed: https://api.github.com/repos/jlarmstrongiv/tfjs-node-lambda/releases/83696745
- Warn: release artifact v2.0.30 not signed: https://api.github.com/repos/jlarmstrongiv/tfjs-node-lambda/releases/83187597
- Warn: release artifact v2.0.29 not signed: https://api.github.com/repos/jlarmstrongiv/tfjs-node-lambda/releases/79856336
- Warn: release artifact v2.0.28 not signed: https://api.github.com/repos/jlarmstrongiv/tfjs-node-lambda/releases/79222627
- Warn: release artifact v2.0.32 does not have provenance: https://api.github.com/repos/jlarmstrongiv/tfjs-node-lambda/releases/87835546
- Warn: release artifact v2.0.31 does not have provenance: https://api.github.com/repos/jlarmstrongiv/tfjs-node-lambda/releases/83696745
- Warn: release artifact v2.0.30 does not have provenance: https://api.github.com/repos/jlarmstrongiv/tfjs-node-lambda/releases/83187597
- Warn: release artifact v2.0.29 does not have provenance: https://api.github.com/repos/jlarmstrongiv/tfjs-node-lambda/releases/79856336
- Warn: release artifact v2.0.28 does not have provenance: https://api.github.com/repos/jlarmstrongiv/tfjs-node-lambda/releases/79222627
Reason
58 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-7r3h-m5j6-3q42
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-4w2v-q235-vp99
- Warn: Project is vulnerable to: GHSA-cph5-m8f7-6c5x
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
- Warn: Project is vulnerable to: GHSA-74fj-2j2h-c42q
- Warn: Project is vulnerable to: GHSA-pw2r-vq6v-hr8c
- Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
- Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
- Warn: Project is vulnerable to: GHSA-ww39-953v-wcq6
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-765h-qjxv-5f44
- Warn: Project is vulnerable to: GHSA-f2jv-r9rf-7988
- Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-qqgx-2p2h-9c37
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
- Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-4r62-v4vq-hr96
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
- Warn: Project is vulnerable to: GHSA-7wpw-2hjm-89gp
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
- Warn: Project is vulnerable to: GHSA-px4h-xg32-q955
- Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
- Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-x2pg-mjhr-2m5x
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
- Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
- Warn: Project is vulnerable to: GHSA-vx3p-948g-6vhq
- Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
- Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw
- Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc
- Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
- Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
- Warn: Project is vulnerable to: GHSA-38fc-wpqx-33j7
- Warn: Project is vulnerable to: GHSA-9m6j-fcg5-2442
- Warn: Project is vulnerable to: GHSA-hh27-ffr2-f2jc
- Warn: Project is vulnerable to: GHSA-rqff-837h-mm52
- Warn: Project is vulnerable to: GHSA-8v38-pw62-9cw2
- Warn: Project is vulnerable to: GHSA-hgjh-723h-mx2j
- Warn: Project is vulnerable to: GHSA-jf5r-8hm2-f872
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-c4w7-xm78-47vh
Score
2.3
/10
Last Scanned on 2025-01-27
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More