npmpackage.info

Gathering detailed insights and metrics for victory

Other packages similar to victory

victory-vendor

37.3.6

Vendored dependencies for Victory

victory-core

37.3.6

Victory Core

victory-pie

37.3.6

Pie Component for Victory

victory-bar

37.3.6

Bar Component for Victory

Gathering detailed insights and metrics for victory

victory - 37.3.6 | npmpackage.info

victory

A collection of composable React components for building interactive data visualizations

37.3.6

11,173

NOASSERTION

TypeScript

2.17 MB

56,930,618 3.7

Installations

npm install victory

Developer Guide

BETA

Typescript

Yes

Module System

CommonJS

Min. Node Version

>=18.0.0

Node Version

18.20.5

NPM Version

10.8.2 Pull Requests

Open

6

Total

1,030

Closed

117

Merged

907

Issues

Open

89

Total

1,903

Closed

1,814

Releases

120

v37.3.6

Updated on Jan 14, 2025

v37.3.5

Updated on Dec 19, 2024

v37.3.4

Updated on Dec 09, 2024

v37.3.3

Updated on Dec 06, 2024

v37.3.2

Updated on Nov 12, 2024

v37.3.1

Updated on Nov 04, 2024

View All 120 releases

Languages

TypeScript

MDX

JavaScript

CSS

TypeScript (59.91%)

MDX (28.19%)

JavaScript (11.71%)

CSS (0.19%)

Developer

FormidableLabs

Download Statistics

Total Downloads

56,930,618

Last Day

56,941

Last Week

276,356

Last Month

1,238,233

Last Year

12,686,975

GitHub Statistics

NOASSERTION License

11,173 Stars

8,646 Commits

528 Forks

119 Watchers

56 Branches

226 Contributors

Updated on Jul 10, 2025

Maintainers

View All 226 Contributors

Package Meta Information

Latest Version

37.3.6

Package Id

victory@37.3.6

Unpacked Size

2.17 MB

Size

383.45 kB

File Count

NPM Version

10.8.2

Node Version

18.20.5

Published on

Jan 14, 2025

Total Downloads

Cumulative downloads

Total Downloads

56,930,618

Last Day

6.8%

56,941

Compared to previous day

Last Week

-3.3%

276,356

Compared to previous week

Last Month

9.7%

1,238,233

Compared to previous month

Last Year

14.4%

12,686,975

Compared to previous year

Weekly Downloads

Monthly Downloads

Yearly Downloads

Victory Documentation

Getting started

Add Victory to your project:

1$ npm install victory --save

Add your first Victory component:

1import React, { Component } from "react";
2import { render } from "react-dom";
3import { VictoryPie } from "victory";
4
5class PieChart extends Component {
6  render() {
7    return <VictoryPie />;
8  }
9}
10
11render(<PieChart />, document.getElementById("app"));

VictoryPie component will be rendered, and you should see:

pie

For detailed documentation and examples please see Victory Documentation

Requirements

Projects using Victory should also depend on React and prop-types.

Victory Native

Want to use Victory with React Native? Check out victory-native-xl

If you would like to use this version of Victory with React Native, you can install the legacy version using the legacy npm tag. See the available versions in npm.

Contributing

No vulnerabilities found.

10

Dangerous-Workflow

Determines if the project's GitHub Action workflows avoid dangerous patterns.

10

Binary-Artifacts

Determines if the project has generated executable (binary) artifacts in the source repository.

9

Code-Review

Determines if the project requires human code review before pull requests (aka merge requests) are merged.

9

License

Determines if the project has defined a license.

0

Token-Permissions

Determines if the project's workflows follow the principle of least privilege.

0

Maintained

Determines if the project is "actively maintained".

0

CII-Best-Practices

Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.

0

Pinned-Dependencies

Determines if the project has declared and pinned the dependencies of its build process.

Reason

dependency not pinned by hash detected -- score normalized to 0

Details

Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/chromatic.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/FormidableLabs/victory/chromatic.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/chromatic.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/FormidableLabs/victory/chromatic.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/FormidableLabs/victory/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/FormidableLabs/victory/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/FormidableLabs/victory/ci.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-stale.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/FormidableLabs/victory/issue-stale.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-triage.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/FormidableLabs/victory/issue-triage.yml/main?enable=pin
Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/release.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/FormidableLabs/victory/release.yml/main?enable=pin
Warn: third-party GitHubAction not pinned by hash: .github/workflows/release.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/FormidableLabs/victory/release.yml/main?enable=pin
Info: 0 out of 7 GitHub-owned GitHubAction dependencies pinned
Info: 0 out of 2 third-party GitHubAction dependencies pinned

0

Fuzzing

Determines if the project uses fuzzing.

0

Security-Policy

Determines if the project has published a security policy.

0

SAST

Determines if the project uses static code analysis.

0

Vulnerabilities

Determines if the project has open, known unfixed vulnerabilities.

Reason

49 existing vulnerabilities detected

Details

Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
Warn: Project is vulnerable to: GHSA-7q7g-4xm8-89cq
Warn: Project is vulnerable to: GHSA-pwfr-8pq7-x9qv
Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
Warn: Project is vulnerable to: GHSA-c2jc-4fpr-4vhg
Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
Warn: Project is vulnerable to: GHSA-36jr-mh4h-2g58
Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
Warn: Project is vulnerable to: GHSA-f7f6-9jq7-3rqj
Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
Warn: Project is vulnerable to: GHSA-mpg4-rc92-vx8v
Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
Warn: Project is vulnerable to: GHSA-4www-5p9h-95mh
Warn: Project is vulnerable to: GHSA-9gqv-wp59-fq42
Warn: Project is vulnerable to: GHSA-m5qc-5hw7-8vg7
Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq
Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488
Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g
Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
Warn: Project is vulnerable to: GHSA-x7hr-w5r2-h6wg
Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
Warn: Project is vulnerable to: GHSA-w5p7-h5w8-2hfq
Warn: Project is vulnerable to: GHSA-fhg7-m89q-25r3
Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975
Warn: Project is vulnerable to: GHSA-cxrh-j4jr-qwg3
Warn: Project is vulnerable to: GHSA-hc6q-2mpp-qw7j
Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v
Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h
Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q

Score

3.7

/10

Last Scanned on 2025-07-07

The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.

Learn More

Other packages similar to victory

Other packages similar to victory

victory

Installations

Developer Guide

Yes

CommonJS

>=18.0.0

18.20.5

10.8.2

Pull Requests

6

1,030

117

907

Issues

89

1,903

1,814

Releases

Languages

Developer

Download Statistics

GitHub Statistics

Maintainers

Package Meta Information

Total Downloads

56,930,618

Weekly Downloads

Monthly Downloads

Yearly Downloads

Dependencies

Peer Dependencies

Victory Documentation

Getting started

Requirements

Victory Native

Contributing

10

10

9

9

0

0

0

0

0

0

0

0

3.7

/10