Package Health Score

84 / 100

security
Security review needed
popularity
Small
maintenance
Healthy
community
Active

Explore Similar Packages

Security

Security review needed

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

Version			Vulnerabilities	License Risk
17.15.6	\|	04/2024	0 C 0 H 0 M 0 L	0 H 0 M 0 L
16.31.4	\|	03/2024	0 C 0 H 0 M 0 L	0 H 0 M 0 L
17.14.0	\|	02/2024	0 C 0 H 0 M 0 L	0 H 0 M 0 L
17.7.0	\|	12/2023	0 C 0 H 0 M 0 L	0 H 0 M 0 L
15.16.0	\|	10/2022	0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

MIT

Security Policy

Yes

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Small

Weekly Downloads (2,084)

GitHub Stars: 426
Forks: 575
Contributors: 140

Direct Usage Popularity

The npm package @plone/volto receives a total of 2,084 downloads a week. As such, we scored @plone/volto popularity level to be Small.

Based on project statistics from the GitHub repository for the npm package @plone/volto, we found that it has been starred 426 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Active

Readme.md: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 140
Funding: Yes

A good and healthy external contribution signal for @plone/volto project, which invites more than one hundred open source maintainers to collaborate on the repository.

Embed Package Health Score Badge

Maintenance

Healthy

Commit Frequency

Open Issues: 760
Open PR: 200
Last Release: 1 day ago
Last Commit: 23 hours ago

Further analysis of the maintenance status of @plone/volto based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that @plone/volto demonstrates a positive version release cadence with at least one new version released in the past 3 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: ^16 || ^18 || ^20

Age: 6 years
Dependencies: 177 Direct
Versions: 582
Install Size: 12.6 MB
Dist-tags: 3
# of Files: 2.73K
Maintainers: 12
TS Typings: No

@plone/volto has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Not sure how to use @plone/volto?

To help you get started, we've collected the most common ways that @plone/volto is being used within popular public projects.

plone / volto / src / components / manage / Sidebar / ImageSidebar.jsx View on Github

)}
      {data.url &amp;&amp; (
        &lt;&gt;
          
            {data.url.split('/').slice(-1)[0]}
            {data.url.includes(settings.apiPath) &amp;&amp; (
              <img alt="{alt}" src="{`${flattenToAppURL(data.url)}/@@images/image/mini`}">
            )}
            {!data.url.includes(settings.apiPath) &amp;&amp; (
              <img style="{{" alt="{alt}" src="{data.url}">
            )}
          
          
            {data.url.includes(settings.apiPath) &amp;&amp; (
               openObjectBrowser()}

View more ways to use @plone/volto

Volto

Introduction

Volto is a ReactJS-based frontend for the Plone Content Management System. It is the default frontend starting with the Plone 6 release.

Plone is a CMS built on Python with more than 20 years of history and experience.

Plone has features that appeal to developers and users alike, such as an intuitive editing interface, customizable content types, hierarchical organization, and a sophisticated permissions model. This allows you to build anything from simple websites to enterprise-grade intranets.

Volto exposes all these features and communicates with Plone via its REST API.

Volto features the Pastanaga editor, a modern block-based content layout editor. It is extensible and customizable, so you can adapt the default blocks provided to match your requirements, or build new ones to cover them.

Volto is extensible using add-ons. You can build your own or choose from the community released ones:

Demo

You can try a Volto online demo at https://6.demo.plone.org/

Create a Volto project

To start a new project using Volto, follow the Plone installation documentation.

Documentation

You can find the latest documentation at https://6.docs.plone.org/.

For links to trainings and videos, see Other learning resources.

Supported Node.js versions

Volto runs using Node.js. We recommend using the current LTS version (18.x).

Node.js 20: Supported since Volto 17.
Node.js 18 (LTS): Supported since Volto 17.
Node.js 16: No longer supported. It was supported from Volto 14 - 16.
Node.js 14: No longer supported. It was supported from Volto 8.8.0 - 16.
Node.js 12: No longer supported. It was supported from Volto 4 - 15.
Node.js 10: No longer supported. It was supported from Volto 1 - 12.

Supported Plone and Python versions

Volto is the default UI for Plone 6. It will work for all released Plone 6 versions.

For the Plone 5 series, the latest released version of Plone 5 is recommended.

The versions of Python that are supported in Volto depend on the version of Plone that you use.

Plone	Python	Volto
6.0	3.8-3.11	16.0 or 17.0
5.2	2.7, 3.6-3.8	15.0

Supported browsers

Volto works well with the current version of any modern browser, including their mobile flavors: Chrome, Firefox, Safari, and Edge.

We do not guarantee that outdated browsers such as Internet Explorer 11 are supported by Volto.

Known good set of versions for backend packages

On Plone 6, we recommend using the known good set (KGS) of package versions that are specified in the Plone release.

On Plone 5, Volto is currently tested with the following packages pinned to specific versions, and we recommend using the same versions, which are:

plone.restapi 8.32.6
plone.rest 2.0.0
plone.volto 4.0.3

Volto in Production

Volto is actively developed since 2017 and used in production since 2018 on the following websites:

VHS Ehrenamtsportal (Website to help volunteers that help refugees for the German Adult Education Association, developed by kitconcept GmbH, 2018)
Zeelandia (Corporate website for one of the leading bakery ingredients manufacturers in Germany, developed by kitconcept GmbH, 2019)
Excellence at Humboldt-Universität zu Berlin (Website for the excellence initiative of the Humboldt University Berlin, developed by kitconcept GmbH, 2019)
Forest Information System for Europe (Thematic website focusing on European forests, developed by Eau de Web, 2019)
Industrial Emissions portal for Europe (Thematic website focusing on European industrial emissions, developed by Eau de Web, 2020)
Energy Climate Union portal for Europe (Thematic website focusing on European strides towards mitigating climate change, developed by Eau de Web, 2020)
Talke Carrer Website (Carrer website for Talke, one of the leading a chemical and petrochemical logistics companies in Germany, developed by kitconcept GmbH, 2020)
Stradanove (Website of the Department of Youth Policies of the Municipality of Modena, developed by RedTurtle, 2020)
VisitModena (Tourist website of the Municipality of Modena, developed by RedTurtle, 2020)
Study guide at University of Jyväskylä (Static website where Volto is used as a headless CMS for authoring additional content, 2020)
Nuova Voce Ecologista (Website of Nuova Voce Ecologista, an Italian green Party, 2020)
BISE (Biodiversity Information System for Europe, developed by Eau de Web, 2019)
MEDICE Webseite (Website for MEDICE Arzneimittel Pütter GmbH & Co. KG), developed by Werkbank GmbH, 2020)
Jobfamilie MEDICE (Carrer website for MEDICE Arzneimittel Pütter GmbH & Co. KG), developed by Werkbank GmbH, 2020)
Baccanale Imola (Baccanale is a food fair that happens every year in Imola, Italy. Developed by RedTurtle, 2020)
ResOU (ResOU is introducing official researched releases by the University of Osaka, Japan. Developed by CMScom, 2020)
Humboldt Labor (The Humboldt Lab is a website where the Humboldt University Berlin presents its latest research projects and findings. Developed by WLDX and kitconcept GmbH, 2020)
Osaka University (Osaka University is considered one of the most prestigious universities in Japan. Developed by CMScom, 2021)
Comune di Modena (Website of the Municipality of Modena. Developed by RedTurtle, 2020)
Comune di Camposanto (Website of the Municipality of Camposanto. Developed by RedTurtle, 2021)
Comune di Cantagallo (Website of the Municipality of Cantagallo. Developed by RedTurtle, 2021)
Comune di Vernio (Website of the Municipality of Vernio. Developed by RedTurtle, 2021)
Unione dei Comuni della Val Bisenzio (Website of the Municipality union of Val Bisenzio. Developed by RedTurtle, 2021)
Comune di Vaiano (Website of the Municipality of Vaiano. Developed by RedTurtle, 2021)
ASP Area Nord (Website of the Public company of personal services of the Modena municipalities in the north area. Developed by RedTurtle, 2021)
Comune di San Possidonio (Website of the Municipality of San Possidonio. Developed by RedTurtle, 2021)
Comune di Mirandola (Website of the Municipality of Mirandola. Developed by RedTurtle, 2021)
Comune di Medolla (Website of the Municipality of Medolla. Developed by RedTurtle, 2021)
Camera di Commercio dell'Umbria (Website Chamber of Commerce of Umbria. Developed by RedTurtle, 2021)
Biblioteche Pianura Est (Website of the Associated libraries of eastern plain. Developed by RedTurtle, 2021)
Camera di Commercio di Reggio Emilia (Website Chamber of Commerce of Reggio Emilia. Developed by RedTurtle, 2021)
RawMaterial (Company's website. Developed by RawMaterial, 2021)
WISE-Freshwater (WISE-Freshwater, the Freshwater Information System for Europe. Developed by Eau de web for the European Environmental Agency, 2021)
EEA-IMSv4 (EEA Indicator Management System v4. Developed by Eau de web for the European Environmental Agency, 2021)
Memori (Corporate website for Memori, startup specializing in technologies applied to the experience of memory through the development of Artificial Intelligences. Developed by RawMaterial, 2021)
TwinCreator (TwinCreator allows you to design and train multiple AI’s through simple conversation through NLP. Developed by RawMaterial, 2021)
MemoryTwin (Product website, MemoryTwin allows you to create your personal artificial intelligence, able to remember and speak. Developed by RawMaterial, 2022)
Forschungszentrum Jülich (Website for Forschungzentrum Jülich, which is one of the largest research institutions in Europe, developed by kitconcept GmbH, 2022)
ILPO (the registration portal of continuous learning at the University of Jyväskylä. Developed by University of Jyväskylä, 2022)
Debabarreneko mankomunitatea (Website of the Commonwealth of Debabarrena, community of municipalities to centralize waste handling services, developed by CodeSyntax, 2022)
Debako Udala / Ayuntamiento de Deba (Website of the municipality of Deba, developed by CodeSyntax, 2022)
Helmholtz-Institut Erlangen-Nürnberg für Erneuerbare Energien (HI-ERN) (Website for HI ERN, a research institution for renewable energies, developed by kitconcept GmbH, 2022)
Lanku (Website for Lanku Kultur Zerbitzuak, a company offering cultural services and improvised Basque verse singing sessions across the Basque Country, developed by CodeSyntax, 2023)
UEU (Website for Udako Euskal Unibertsitatea, a non-profit University offering all its service only in Basque: courses, publications, ... developed by CodeSyntax, 2023)
German Aerospace Center (DLR) (The German Aerospace Center (DLR) is the Federal Republic of Germany's research center for aeronautics. With more than 10.000 employees and a yearly budget of more than 1 billion euros, it is one of the largest research institutions in Germany, developed by kitconcept GmbH, 2023)
Leibniz Institute for Science and Mathematics Education (IPN) (Website of the IPN, a research institute dedicated to issues related to learning and teaching of science, mathematics and computer science in and outside of schools, developed by Starzel, 2023)

Please create a new issue or pull request to add your Volto-site here!

Contributing to Volto

To contribute to the Volto project by writing code, documentation, translations, and so on, please read Contributing to Plone and Contributing to Volto.

Contributors

License

MIT License. Copyrights held by the Plone Foundation.

See LICENSE.md for details.

@plone/volto dependencies

@babel/core @babel/eslint-parser @babel/plugin-proposal-export-default-from @babel/plugin-proposal-export-namespace-from @babel/plugin-proposal-json-strings @babel/plugin-proposal-nullish-coalescing-operator @babel/plugin-proposal-throw-expressions @babel/plugin-syntax-export-namespace-from @babel/runtime @babel/types @loadable/babel-plugin @loadable/component @loadable/server @loadable/webpack-plugin @plone/scripts @testing-library/cypress @testing-library/jest-dom @testing-library/react @testing-library/react-hooks @types/uuid autoprefixer axe-core babel-plugin-add-module-exports babel-plugin-lodash babel-plugin-react-intl babel-plugin-root-import babel-preset-razzle circular-dependency-plugin classnames commander connected-react-router crypto-random-string css-loader cypress cypress-axe cypress-file-upload debug decorate-component-with-props deep-freeze dependency-graph detect-browser diff draft-js draft-js-block-breakout-plugin draft-js-buttons draft-js-import-html draft-js-inline-toolbar-plugin draft-js-plugins-editor draft-js-plugins-utils draftjs-filters eslint eslint-config-prettier eslint-config-react-app eslint-import-resolver-alias eslint-import-resolver-babel-plugin-root-import eslint-plugin-import eslint-plugin-jsx-a11y eslint-plugin-prettier eslint-plugin-react eslint-plugin-react-hooks express filesize github-slugger glob history hoist-non-react-statics html-webpack-plugin http-proxy-middleware husky identity-obj-proxy image-extensions immutable is-hotkey is-url jest-file jotai jwt-decode less less-loader linkify-it lint-staged locale lodash lodash-move lodash-webpack-plugin mini-css-extract-plugin moment moment-locales-webpack-plugin object-assign pofile postcss postcss-flexbugs-fixes postcss-less postcss-load-config postcss-loader postcss-overrides postcss-scss prepend-http prettier pretty-bytes prismjs promise-file-reader prop-types query-string razzle razzle-dev-utils razzle-plugin-bundle-analyzer razzle-plugin-scss rc-time-picker react react-anchor-link-smooth-scroll react-animate-height react-beautiful-dnd react-cookie react-dates react-detect-click-outside react-dnd react-dnd-html5-backend react-dom react-dropzone react-fast-compare react-image-gallery react-intersection-observer react-intl react-intl-redux react-medium-image-zoom react-portal react-redux react-router react-router-config react-router-dom react-router-hash-link react-select react-select-async-paginate react-share react-side-effect react-simple-code-editor react-sortable-hoc react-test-renderer react-toastify react-transition-group react-virtualized redraft redux redux-actions redux-connect redux-devtools-extension redux-localstorage-simple redux-mock-store redux-thunk rrule semantic-ui-less semantic-ui-react serialize-javascript slate slate-hyperscript slate-react start-server-and-test style-loader stylelint stylelint-config-idiomatic-order stylelint-prettier superagent svg-loader svgo-loader terser-webpack-plugin tlds undoo universal-cookie universal-cookie-express use-deep-compare-effect uuid webpack webpack-dev-server webpack-node-externals xmlrpc yarnhook

FAQs

What is @plone/volto?

Volto. Visit Snyk Advisor to see a full health score report for @plone/volto, including popularity, security, maintenance & community analysis.

Is @plone/volto popular?

The npm package @plone/volto receives a total of 2,084 weekly downloads. As such, @plone/volto popularity was classified as small. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is @plone/volto well maintained?

We found that @plone/volto demonstrated a healthy version release cadence and project activity. It has a community of 140 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is @plone/volto safe to use?

While scanning the latest version of @plone/volto, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 24 April-2024, at 21:39 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP

Package Health Score

Explore Similar Packages

Security and license risk for significant versions

Is your project affected by vulnerabilities?

Weekly Downloads (2,084)

Direct Usage Popularity

Embed Package Health Score Badge

Commit Frequency

Keep your project healthy

Check your package.json

Snyk Vulnerability Scanner

Not sure how to use @plone/volto?

Volto

Introduction

Demo

Create a Volto project

Documentation

Supported Node.js versions

Supported Plone and Python versions

Supported browsers

Known good set of versions for backend packages

Volto in Production

Contributing to Volto

Contributors

License

@plone/volto dependencies

@plone/volto development dependencies

FAQs

What is @plone/volto?

Is @plone/volto popular?

Is @plone/volto well maintained?

Is @plone/volto safe to use?

Build a secure application checklist

Select a recommended open source package

Scan your app for vulnerabilities

Source Code

Open Source

Container

Config

Fix identified vulnerabilities

Monitor for new issues