Installations
npm install weallcontribute
Developer Guide
Typescript
No
Module System
CommonJS
Node Version
10.15.3
NPM Version
6.9.1-next.0
Score
53.1
Supply Chain
73
Quality
76.4
Maintenance
50
Vulnerability
87.3
License
Releases
Unable to fetch releases
Contributors
Unable to fetch Contributors
Languages
JavaScript (100%)
Developer
wealljs
Download Statistics
Total Downloads
103,370
Last Day
12
Last Week
82
Last Month
881
Last Year
12,859
GitHub Statistics
167 Stars
42 Commits
36 Forks
8 Watching
6 Branches
7 Contributors
Bundle Size
159.74 kB
Minified
48.92 kB
Minified + Gzipped
Package Meta Information
Latest Version
1.0.9
Package Id
weallcontribute@1.0.9
Size
13.02 kB
NPM Version
6.9.1-next.0
Node Version
10.15.3
Publised On
07 Jun 2019
Total Downloads
Cumulative downloads
Total Downloads
103,370
Last day
-14.3%
12
Compared to previous day
Last week
-5.7%
82
Compared to previous week
Last month
-78.4%
881
Compared to previous month
Last year
52.1%
12,859
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
2
Dev Dependencies
4
weallcontribute
weallcontribute
is a command-line tool for automatically generating and updating CONTRIBUTING.md
guidelines for your projects.
Install
Locally to your npm project (recommended):
$ npm install --save-dev weallcontribute
Globally:
$ npm install -g weallcontribute
Example
npm repo
1// package.json 2{ 3 "scripts": { 4 "update-contrib": "weallcontribute -o . && git add CONTRIBUTING.md && git commit -m 'docs(contributing): updated CONTRIBUTING.md'" 5 } 6} 7// Now you can do `npm run update-contrib` any time you 8// bump your `weallcontribute` version to bring your docs 9// up to date! And you don't need a global install!
Global CLI install
1# Read your repo info from package.json or git 2# and pipe the output to `contribs.md` 3$ weallcontribute > contribs.md 4 5# Write a CONTRIBUTING.md document for org/proj to the ./foo dir. 6$ weallcontribute org/proj -o ./foo
No vulnerabilities found.
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Warn: project license file does not contain an FSF or OSI license.
Reason
Found 3/15 approved changesets -- score normalized to 2
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
branch protection not enabled on development/release branches
Details
- Warn: branch protection not enabled for branch 'latest'
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 19 are checked with a SAST tool
Reason
12 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
- Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-rxrc-rgv4-jpvx
- Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
- Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
Score
2
/10
Last Scanned on 2024-12-16
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More