npmpackage.info

Gathering detailed insights and metrics for ts-morph

Other packages similar to ts-morph

@ts-morph/common

0.25.0

Common functionality for ts-morph packages.

ts-morph-helpers

0.6.3

Helpers for ts-morph

@rxap/schematics-ts-morph

18.2.2

[![npm version](https://img.shields.io/npm/v/@rxap/schematics-ts-morph?style=flat-square)](https://www.npmjs.com/package/@rxap/schematics-ts-morph) [![commitizen friendly](https://img.shields.io/badge/commitizen-friendly-brightgreen.svg?style=flat-square)

@rxap/ts-morph

1.5.1

[![npm version](https://img.shields.io/npm/v/@rxap/ts-morph?style=flat-square)](https://www.npmjs.com/package/@rxap/ts-morph) [![commitizen friendly](https://img.shields.io/badge/commitizen-friendly-brightgreen.svg?style=flat-square)](https://commitizen.g

Gathering detailed insights and metrics for ts-morph

ts-morph

TypeScript Compiler API wrapper for static analysis and programmatic code changes.

24.0.0

5,032

MIT

TypeScript

1.26 MB

368,458,245 4.1

Installations

npm install ts-morph

Score

96.9

Supply Chain

99.3

Quality

82.3

Maintenance

100

Vulnerability

99.6

License

Pull Requests

Open

6

Total

193

Closed

22

Merged

165

Issues

Open

266

Total

1,213

Closed

947

Releases

24.0.0

Published on 06 Oct 2024

23.0.0

Published on 23 Jun 2024

22.0.0

Published on 10 Mar 2024

21.0.1

Published on 02 Dec 2023

21.0.0

Published on 02 Dec 2023

20.0.0

Published on 21 Sept 2023

View all 17 releases

Developer

dsherret

Developer Guide

BETA

Module System

CommonJS, UMD

Min. Node Version

Typescript Support

No

Node Version

22.9.0

NPM Version

10.8.3 Statistics

5,032 Stars

2,310 Commits

196 Forks

22 Watching

11 Branches

59 Contributors

Updated on 28 Nov 2024

Bundle Size

5.49 MB

Minified

1.26 MB

Minified + Gzipped

Bundlephobia

Languages

TypeScript (99.97%)

JavaScript (0.03%)

Total Downloads

Cumulative downloads

Total Downloads

368,458,245

Last day

-10.6%

600,156

Compared to previous day

Last week

2.4%

3,500,230

Compared to previous week

Last month

14.4%

14,593,170

Compared to previous month

Last year

20.7%

134,338,544

Compared to previous year

Daily Downloads

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

@ts-morph/common code-block-writer

Dev Dependencies

@rollup/plugin-typescript @types/chai @types/diff @types/mocha @types/node chai conditional-type-checks cross-env diff mocha standard-version rimraf rollup ts-node typescript

Versions

ts-morph

Monorepo for ts-morph and related projects.

Packages

ts-morph - TypeScript Compiler API wrapper. Provides an easier way to programmatically navigate and manipulate TypeScript and JavaScript code.
@ts-morph/bootstrap - Separate library for getting quickly setup with the Compiler API.

Resources

TypeScript AST Viewer

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

License

Determines if the project has defined a license.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

7

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

5

Maintained

Determines if the project is "actively maintained".

4

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 4

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/dsherret/ts-morph/ci.yml/latest?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/dsherret/ts-morph/ci.yml/latest?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/dsherret/ts-morph/ci.yml/latest?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/dsherret/ts-morph/ci.yml/latest?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/dsherret/ts-morph/ci.yml/latest?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/dsherret/ts-morph/ci.yml/latest?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/dsherret/ts-morph/publish.yml/latest?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/dsherret/ts-morph/publish.yml/latest?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/dsherret/ts-morph/publish.yml/latest?enable=pin
Info: 0 out of 6 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 3 third-party GitHubAction dependencies pinned
Info: 3 out of 3 npmCommand dependencies pinned

2

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Security-Policy

Determines if the project has published a security policy.

0

Branch-Protection

Determines if the default and release branches are protected with GitHub's branch protection settings.

0

Fuzzing

Determines if the project uses fuzzing.

0

SAST

Determines if the project uses static code analysis.

Score

4.1

/10

Last Scanned on 2024-11-25

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More