Gathering detailed insights and metrics for types-registry
Gathering detailed insights and metrics for types-registry
Gathering detailed insights and metrics for types-registry
Gathering detailed insights and metrics for types-registry
npm install types-registry
98.8
Supply Chain
34.7
Quality
98.6
Maintenance
100
Vulnerability
100
License
@definitelytyped/typescript-versions@0.1.6
Published on 25 Nov 2024
@definitelytyped/typescript-packages@0.1.6
Published on 25 Nov 2024
@definitelytyped/header-parser@0.2.16
Published on 25 Nov 2024
@definitelytyped/eslint-plugin@0.1.22
Published on 25 Nov 2024
@definitelytyped/dtslint-runner@0.1.31
Published on 25 Nov 2024
@definitelytyped/dtslint@0.2.28
Published on 25 Nov 2024
Module System
Unable to determine the module system for this package.
Min. Node Version
Typescript Support
Node Version
NPM Version
366 Stars
2,973 Commits
213 Forks
11 Watching
26 Branches
10,000 Contributors
Updated on 27 Nov 2024
Minified
Minified + Gzipped
TypeScript (92.37%)
JavaScript (7.63%)
Cumulative downloads
Total Downloads
Last day
-11.2%
553,125
Compared to previous day
Last week
-2.3%
5,654,815
Compared to previous week
Last month
3%
24,108,827
Compared to previous month
Last year
-45.6%
176,333,748
Compared to previous year
No dependencies detected.
A monorepo for formerly disparate DefinitelyTyped-related tools:
@types
packages. Run weekly.These tools are not intended for public consumption, so we may break the API whenever convenient for us.
This is a monorepo managed with pnpm workspaces and published with changesets. After cloning, run pnpm install
to install dependencies for each package and link them to each other.
All packages use jest, with a single configuration set up to be run from the monorepo root. pnpm test
is an alias for jest
, so you can run tests with any of jest’s CLI options. For example, to run tests for a single package:
1pnpm test packages/utils
types-publisher runs in GitHub Actions using all monorepo packages built from source on master
.
The public packages are published to npm using changesets. When making changes to any publishable package, run pnpm changeset
(ideally as part of the related feature PR) to mark the changed packages for eventual version bumping and release. When that PR is merged, another PR will be automatically opened (or updated) updating package versions and CHANGELOGs. What that PR is merged, a workflow will publish the changed packages to npm.
This project welcomes contributions and suggestions. Most contributions require you to agree to a Contributor License Agreement (CLA) declaring that you have the right to, and actually do, grant us the rights to use your contribution. For details, visit https://cla.opensource.microsoft.com.
When you submit a pull request, a CLA bot will automatically determine whether you need to provide a CLA and decorate the PR appropriately (e.g., status check, comment). Simply follow the instructions provided by the bot. You will only need to do this once across all repos using our CLA.
This project has adopted the Microsoft Open Source Code of Conduct. For more information see the Code of Conduct FAQ or contact opencode@microsoft.com with any additional questions or comments.
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
30 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Reason
security policy file detected
Details
Reason
license file detected
Details
Reason
no binaries found in the repo
Reason
dependency not pinned by hash detected -- score normalized to 9
Details
Reason
SAST tool detected but not run on all commits
Details
Reason
Found 22/29 approved changesets -- score normalized to 7
Reason
7 existing vulnerabilities detected
Details
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
Reason
project is not fuzzed
Details
Reason
branch protection not enabled on development/release branches
Details
Score
Last Scanned on 2024-11-25
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More