@verdaccio/signature

v6.0.0-6-next.2

verdaccio signature utils For more information about how to use this package see README

Latest version published 2 years ago
License: MIT

Ensure you're using the healthiest npm packages

Snyk scans all the packages in your projects for vulnerabilities and provides automated fix advice

Package Health Score

77 / 100

Security

No known security issues
All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

All Versions
Version Vulnerabilities License Risk
6.0.0-6-next.2 | 02/2023
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
  • 0
    H
  • 0
    M
  • 0
    L
License
MIT
Security Policy
Yes

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Influential project

Weekly Downloads (163,243)

Download trend
GitHub Stars
16.37K
Forks
1.37K
Contributors
270

Direct Usage Popularity

Occasionally

The npm package @verdaccio/signature receives a total of 163,243 downloads a week. As such, we scored @verdaccio/signature popularity level to be Influential project.

Based on project statistics from the GitHub repository for the npm package @verdaccio/signature, we found that it has been starred 16,370 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Active
Readme.md
No
Contributing.md
Yes
Code of Conduct
Yes
Contributors
270
Funding
Yes

A good and healthy external contribution signal for @verdaccio/signature project, which invites more than one hundred open source maintainers to collaborate on the repository.

How about a good first contribution to this project? It seems that @verdaccio/signature is missing a README file.


Embed Package Health Score Badge

package health: 77/100 package health 77/100

Maintenance

Inactive

Commit Frequency

Open Issues
59
Open PR
7
Last Release
2 years ago
Last Commit
1 month ago

Further analysis of the maintenance status of @verdaccio/signature based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Inactive.

An important project maintenance signal to consider for @verdaccio/signature is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Package

Node.js Compatibility
>=12

Age
2 years
Dependencies
3 Direct
Versions
10
Install Size
40.4 kB
Dist-tags
5
# of Files
39
Maintainers
4
TS Typings
No

@verdaccio/signature has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.