https://github.com/npm/ssri

npm-cli

Score: 30.22889844493273

Last synced: about 11 hours ago
JSON representation

Repository metadata:

subresource integrity for npm

Host: GitHub
URL: https://github.com/npm/ssri
Owner: npm
License: other
Created: 2019-06-26T02:49:12.000Z (almost 7 years ago)
Default Branch: main
Last Pushed: 2026-03-24T14:56:03.000Z (3 days ago)
Last Synced: 2026-03-27T01:25:02.223Z (about 14 hours ago)
Topics: npm-cli
Language: JavaScript
Homepage:
Size: 615 KB
Stars: 58
Watchers: 8
Forks: 28
Open Issues: 1
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE.md
- Code of conduct: CODE_OF_CONDUCT.md
- Codeowners: .github/CODEOWNERS
- Security: SECURITY.md

Owner metadata:

Name: npm
Login: npm
Email:
Kind: organization
Description: JavaScript Package Manager, Registry & Website
Website: https://npmjs.com
Location: United States of America
Twitter: npmjs
Company:
Icon url: https://avatars.githubusercontent.com/u/6078720?v=4
Repositories: 343
Last Synced at: 2024-04-14T06:35:40.452Z
Profile URL: https://github.com/npm

GitHub Events

Total

Create event: 7
Delete event: 12
Fork event: 4
Issue comment event: 3
Issues event: 1
Pull request event: 20
Pull request review event: 6
Push event: 25
Release event: 2
Watch event: 2
Total: 82

Last Year

Create event: 7
Delete event: 12
Fork event: 4
Issue comment event: 2
Pull request event: 20
Pull request review event: 6
Push event: 25
Release event: 2
Total: 78

Committers metadata

Last synced: 2 days ago

Total Commits: 231
Total Committers: 16
Avg Commits per committer: 14.438
Development Distribution Score (DDS): 0.593

Commits in past year: 21
Committers in past year: 6
Avg Commits per committer in past year: 3.5
Development Distribution Score (DDS) in past year: 0.476

Name	Email	Commits
Kat Marchán	k**m@s**g	94
dependabot[bot]	4****]	44
Luke Karrys	l**e@l**m	24
isaacs	i**@i**e	18
github-actions[bot]	4****]	13
Gar	g**h@d**r	12
Chris Sidi	h**s@g**m	5
Vinicius Lourenço	1****d	4
nlf	q**k@g**m	4
claudiahdz	c**0@g**m	4
Michael Smith	o**t@g**m	4
Ryan Day	s**r@g**m	1
Lewis Hemens	m**e@l**m	1
Eric Cornelissen	e**n@g**m	1
Dirk Stolle	s**v@w**e	1
Ahmed Walid Elhakim	5****m	1

Issue and Pull Request metadata

Last synced: 3 days ago

Total issues: 11
Total pull requests: 164
Average time to close issues: 3 months
Average time to close pull requests: 13 days
Total issue authors: 11
Total pull request authors: 16
Average comments per issue: 1.82
Average comments per pull request: 1.01
Merged pull request: 86
Bot issues: 1
Bot pull requests: 128

Past year issues: 1
Past year pull requests: 22
Past year average time to close issues: 4 days
Past year average time to close pull requests: 7 days
Past year issue authors: 1
Past year pull request authors: 4
Past year average comments per issue: 0.0
Past year average comments per pull request: 0.45
Past year merged pull request: 21
Past year bot issues: 1
Past year bot pull requests: 17

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/npm/ssri

Top Issue Authors

github-campaigns[bot] (1)
tsteuwer (1)
isaacs (1)
pasieronen (1)
igibek (1)
mikemimik (1)
gitcloned (1)
AndrewGibson27 (1)
dave-smartystreets (1)
JamieSlome (1)
chrisschaub (1)

Top Pull Request Authors

dependabot[bot] (112)
github-actions[bot] (16)
wraithgar (6)
hashtagchris (4)
claudiahdz (4)
H4ad (4)
owlstronaut (4)
nlf (3)
lukekarrys (2)
striezel (2)
isaacs (2)
0verk1ll (1)
ericcornelissen (1)
lewish (1)
ahmedwelhakim (1)

Top Issue Labels

Needs Triage (1)
Bug (1)

Top Pull Request Labels

Dependencies (110)
autorelease: tagged (11)
autorelease: pending (5)

Package metadata

Total packages: 11
Total downloads:
- npm: 164,244,889 last-month
Total docker downloads: 14,066,929,912
Total dependent packages: 847 (may contain duplicates)
Total dependent repositories: 951,034 (may contain duplicates)
Total versions: 65
Total maintainers: 5
Total advisories: 2

npmjs.org: ssri

Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.

Homepage: https://github.com/npm/ssri#readme
Licenses: ISC
Latest release: 13.0.1 (published about 2 months ago)
Last Synced: 2026-03-25T09:44:47.668Z (2 days ago)
Versions: 43
Dependent Packages: 838
Dependent Repositories: 951,034
Downloads: 164,244,889 Last month
Docker Downloads: 14,066,929,912
Rankings:
- Docker downloads count: 0.002%
- Downloads: 0.011%
- Dependent repos count: 0.036%
- Dependent packages count: 0.079%
- Average: 1.841%
- Forks count: 4.995%
- Stargazers count: 5.923%
Maintainers (5)
- gar
- saquibkhan
- reggi
- npm-cli-ops
- owlstronaut
Advisories:
- Regular Expression Denial of Service (ReDoS)
- Regular Expression Denial of Service in ssri

repo1.maven.org: org.webjars.npm:ssri

WebJar for ssri

Homepage: https://www.webjars.org
Documentation: https://appdoc.app/artifact/org.webjars.npm/ssri/
Licenses: ISC
Latest release: 12.0.0 (published 11 months ago)
Last Synced: 2026-03-25T03:05:15.039Z (3 days ago)
Versions: 13
Dependent Packages: 9
Dependent Repositories: 0
Rankings:
- Dependent packages count: 6.414%
- Average: 19.197%
- Dependent repos count: 31.98%

ubuntu-23.10: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 9.0.1-2 (published about 1 month ago)
Last Synced: 2026-03-13T22:20:48.027Z (14 days ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

ubuntu-20.04: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 7.1.0-2 (published about 1 month ago)
Last Synced: 2026-03-13T18:30:36.036Z (14 days ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

ubuntu-24.10: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 9.0.1-3 (published about 2 months ago)
Last Synced: 2026-03-09T07:28:22.470Z (18 days ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

debian-11: node-ssri

Homepage: https://github.com/npm/ssri#readme
Documentation: https://packages.debian.org/bullseye/node-ssri
Licenses:
Latest release: 8.0.1-2 (published about 1 month ago)
Last Synced: 2026-03-14T02:21:35.101Z (14 days ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

ubuntu-23.04: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 9.0.1-2 (published about 1 month ago)
Last Synced: 2026-03-11T11:04:13.858Z (16 days ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

ubuntu-22.04: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 8.0.1-2 (published about 2 months ago)
Last Synced: 2026-03-07T16:32:39.369Z (20 days ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

debian-13: node-ssri

Homepage: https://github.com/npm/ssri#readme
Documentation: https://packages.debian.org/trixie/node-ssri
Licenses:
Latest release: 9.0.1-3 (published about 1 month ago)
Last Synced: 2026-03-14T07:07:48.220Z (13 days ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

debian-12: node-ssri

Homepage: https://github.com/npm/ssri#readme
Documentation: https://packages.debian.org/bookworm/node-ssri
Licenses:
Latest release: 9.0.1-2 (published about 1 month ago)
Last Synced: 2026-03-13T21:50:10.818Z (14 days ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

ubuntu-24.04: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 9.0.1-2 (published about 2 months ago)
Last Synced: 2026-03-06T07:03:18.889Z (21 days ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

Dependencies

package.json npm

@npmcli/eslint-config ^3.0.1 development
@npmcli/template-oss 3.6.0 development
tap ^16.0.1 development
minipass ^3.1.1

.github/workflows/audit.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite

.github/workflows/ci-release.yml actions

LouisBrunner/checks-action v1.3.1 composite
actions/checkout v3 composite
actions/github-script v6 composite
actions/setup-node v3 composite

.github/workflows/ci.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite

.github/workflows/codeql-analysis.yml actions

actions/checkout v3 composite
github/codeql-action/analyze v2 composite
github/codeql-action/init v2 composite

.github/workflows/post-dependabot.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite
dependabot/fetch-metadata v1 composite

.github/workflows/pull-request.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite

.github/workflows/release.yml actions

LouisBrunner/checks-action v1.3.1 composite
actions/checkout v3 composite
actions/github-script v6 composite
actions/setup-node v3 composite

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Summary