Gathering detailed insights and metrics for vega-tooltip
Gathering detailed insights and metrics for vega-tooltip
Installations
npm install vega-tooltipScore
98.6
Supply Chain
93.2
Quality
91.5
Maintenance
100
Vulnerability
100
License
Releases
17
Developer
Developer Guide
BETA
Module System
CommonJS
Min. Node Version
Typescript Support
Yes
Node Version
20.18.0
NPM Version
10.9.0
Statistics
79 Stars
1,128 Commits
45 Forks
17 Watching
10 Branches
33 Contributors
Updated on 16 Nov 2024
Languages
TypeScript (83.92%)
JavaScript (12.02%)
SCSS (3.53%)
Shell (0.53%)
Total Downloads
Cumulative downloads
Total Downloads
27,207,259
Last day
-1.7%
24,738
Compared to previous day
Last week
-4.8%
125,650
Compared to previous week
Last month
2.3%
574,414
Compared to previous month
Last year
26.6%
8,170,008
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
Dev Dependencies
35
@babel/core@babel/plugin-proposal-async-generator-functions@babel/plugin-proposal-json-strings@babel/plugin-proposal-object-rest-spread@babel/plugin-proposal-optional-catch-binding@babel/plugin-syntax-dynamic-import@babel/plugin-transform-runtime@babel/preset-env@babel/preset-typescript@release-it/conventional-changelog@rollup/plugin-json@rollup/plugin-node-resolve@rollup/plugin-terser@rollup/plugin-typescript@types/jest@typescript-eslint/eslint-plugin@typescript-eslint/parserbrowser-syncconcurrentlyeslinteslint-config-prettiereslint-plugin-jesteslint-plugin-prettiergh-pagesjestjest-environment-jsdompathprettierrelease-itrolluprollup-plugin-bundle-sizesasstypescriptvega-datasetsvega-typings
Optional Dependencies
1
Versions
Tooltip for Vega & Vega-Lite
A tooltip plugin for Vega and Vega-Lite visualizations. This plugin implements a custom tooltip handler for Vega that uses custom HTML tooltips instead of the HTML title attribute. Vega Tooltip is installed in the Vega Editor.
Features
- Renders nice tooltips for Vega and Vega-Lite charts
- Supports dark and light theme
- Renders object-valued tooltips as a table
- Supports special keys
title(becomes the title of the tooltip) andimage(used as the url for an embedded image)
Demo
http://vega.github.io/vega-tooltip/
Installing
We recommend using Vega-Embed, which already comes with this tooltip plugin.
You can install Vega tooltip directly with npm install vega-tooltip.
Using Vega-tooltip with a CDN
You can import vega-tooltip directly from jsDelivr. Replace [VERSION] with the version that you want to use.
1<!-- Import Vega 5 & Vega-Lite 4 (does not have to be from CDN) --> 2<script src="https://cdn.jsdelivr.net/npm/vega@5"></script> 3<script src="https://cdn.jsdelivr.net/npm/vega-lite@4"></script> 4 5<script src="https://cdn.jsdelivr.net/npm/vega-tooltip@[VERSION]"></script>
Usage and APIs
If you use Vega-Embed, you don't need to install Vega Tooltip! Vega Embed already comes with Vega Tooltip. You can however pass tooltip customizations.
1vegaEmbed("#vis", spec, {tooltip: {theme: 'dark'}})
2 .then(function(result) {
3 // result.view contains the Vega view
4 })
5 .catch(console.error);If you want to use a different version of the tooltip handler, you can override the default handler with the handler from Vega Tooltip (and you need to install it separately).
1var handler = new vegaTooltip.Handler();
2vegaEmbed("#vis", spec, {tooltip: handler.call})
3 .then(function(result) {
4 // result.view contains the Vega view
5 })
6 .catch(console.error);See the API documentation for details.
Tutorials
Run Instructions
- In the project folder
vega-tooltip, type commandnpm ito install dependencies. - Then, type
npm run start. This will build the library and start a web server. - In your browser, navigate to
http://localhost:8000/, where you can see various Vega-Lite and Vega visualizations with tooltip interaction.
Publishing
To make a release, run npm run release. The update the website with npm run deploy:gh.
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: BSD 3-Clause "New" or "Revised" License: LICENSE:0
Reason
2 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
Reason
Found 2/8 approved changesets -- score normalized to 2
Reason
dependency not pinned by hash detected -- score normalized to 2
Details
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/check-pr.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/vega/vega-tooltip/check-pr.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/merge-dependabot.yml:12: update your workflow using https://app.stepsecurity.io/secureworkflow/vega/vega-tooltip/merge-dependabot.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/vega/vega-tooltip/test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/vega/vega-tooltip/test.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/test.yml:34: update your workflow using https://app.stepsecurity.io/secureworkflow/vega/vega-tooltip/test.yml/main?enable=pin
- Info: 0 out of 2 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 3 third-party GitHubAction dependencies pinned
- Info: 1 out of 1 npmCommand dependencies pinned
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/check-pr.yml:11
- Warn: no topLevel permission defined: .github/workflows/merge-dependabot.yml:1
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 25 are checked with a SAST tool
Score
5
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More