ssri

v9.0.1

Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.

ISC
Latest version published 7 days ago
    npm install ssri
  

Package Health Score

89 / 100

Security

No known security issues
Powered by Snyk
All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

All Versions
Version Vulnerabilities License Risk
9.0.1 | 05/2022
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
  • 0
    H
  • 0
    M
  • 0
    L
7.1.1 | 05/2021
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
  • 0
    H
  • 0
    M
  • 0
    L
6.0.2 | 04/2021
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
  • 0
    H
  • 0
    M
  • 0
    L
8.0.1 | 01/2021
Popular
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
  • 0
    H
  • 0
    M
  • 0
    L
5.3.0 | 03/2018
  • 0
    C
  • 0
    H
  • 0
    M
  • 0
    L
  • 0
    H
  • 0
    M
  • 0
    L
License
ISC
Security Policy
Yes

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

# Install the Snyk CLI and test your project
npm i snyk -g && snyk test ssri
Get started free

Popularity

Influential project

Weekly Downloads (22,129,973)

Download trend
Dependents
349
GitHub Stars
33
Forks
17
Contributors
20

Direct Usage Popularity

TOP 5%

The npm package ssri receives a total of 22,129,973 downloads a week. As such, we scored ssri popularity level to be Influential project.

Based on project statistics from the GitHub repository for the npm package ssri, we found that it has been starred 33 times, and that 349 other projects in the ecosystem are dependent on it.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Sustainable
Readme.md
Yes
Contributing.md
No
Code of Conduct
Yes
Contributors
20
Funding
No

With more than 10 contributors for the ssri repository, this is possibly a sign for a growing and inviting community.


Embed Package Health Score Badge

package health: 89/100 package health 89/100

Maintenance

Healthy

Commit Frequency

Open Issues
0
Open PR
0
Last Release
7 days ago
Last Commit
7 days ago

Further analysis of the maintenance status of ssri based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Healthy.

We found that ssri demonstrates a positive version release cadence with at least one new version released in the past 3 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Package

Node.js Compatibility
^12.13.0 || ^14.15.0 || >=16.0.0

Age
5 years
Dependencies
1 Direct
Versions
33
Install Size
37.5 kB
Dist-tags
1
# of Files
4
Maintainers
6
TS Typings
Yes

ssri has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.