@verdaccio/signature

v6.0.0-6-next.2

verdaccio signature utils For more information about how to use this package see README

Latest version published 1 year ago
License: MIT

Ensure you're using the healthiest npm packages

Snyk scans all the packages in your projects for vulnerabilities and provides automated fix advice

Package Health Score

84 / 100

Security

No known security issues
All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

All Versions
Version Vulnerabilities License Risk
6.0.0-6-next.2 | 02/2023
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
  • 0
    H
  • 0
    M
  • 0
    L
License
MIT
Security Policy
Yes

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Influential project

Weekly Downloads (132,250)

Download trend
GitHub Stars
16.03K
Forks
1.35K
Contributors
270

Direct Usage Popularity

Occasionally

The npm package @verdaccio/signature receives a total of 132,250 downloads a week. As such, we scored @verdaccio/signature popularity level to be Influential project.

Based on project statistics from the GitHub repository for the npm package @verdaccio/signature, we found that it has been starred 16,030 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Active
Readme.md
Yes
Contributing.md
Yes
Code of Conduct
Yes
Contributors
270
Funding
Yes

A good and healthy external contribution signal for @verdaccio/signature project, which invites more than one hundred open source maintainers to collaborate on the repository.


Embed Package Health Score Badge

package health: 84/100 package health 84/100

Maintenance

Sustainable

Commit Frequency

Open Issues
58
Open PR
3
Last Release
1 year ago
Last Commit
5 days ago

Further analysis of the maintenance status of @verdaccio/signature based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Sustainable.

An important project maintenance signal to consider for @verdaccio/signature is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Package

Node.js Compatibility
>=12

Age
1 year
Dependencies
3 Direct
Versions
8
Install Size
40.4 kB
Dist-tags
4
# of Files
39
Maintainers
4
TS Typings
No

@verdaccio/signature has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.