https://github.com/npm/ssri

npm-cli

Score: 30.313093849689324

Last synced: about 5 hours ago
JSON representation

Repository metadata:

subresource integrity for npm

Host: GitHub
URL: https://github.com/npm/ssri
Owner: npm
License: other
Created: 2019-06-26T02:49:12.000Z (almost 7 years ago)
Default Branch: main
Last Pushed: 2026-05-22T15:30:30.000Z (28 days ago)
Last Synced: 2026-05-29T01:02:45.369Z (22 days ago)
Topics: npm-cli
Language: JavaScript
Homepage:
Size: 628 KB
Stars: 59
Watchers: 7
Forks: 28
Open Issues: 1
Metadata Files:
- Readme: README.md
- Changelog: CHANGELOG.md
- Contributing: CONTRIBUTING.md
- License: LICENSE.md
- Code of conduct: CODE_OF_CONDUCT.md
- Codeowners: .github/CODEOWNERS
- Security: SECURITY.md

Owner metadata:

Name: npm
Login: npm
Email:
Kind: organization
Description: JavaScript Package Manager, Registry & Website
Website: https://npmjs.com
Location: United States of America
Twitter: npmjs
Company:
Icon url: https://avatars.githubusercontent.com/u/6078720?v=4
Repositories: 343
Last Synced at: 2024-04-14T06:35:40.452Z
Profile URL: https://github.com/npm

GitHub Events

Total

Create event: 8
Delete event: 14
Fork event: 4
Issue comment event: 4
Issues event: 1
Pull request event: 21
Pull request review event: 7
Push event: 30
Release event: 2
Watch event: 3
Total: 94

Last Year

Create event: 7
Delete event: 11
Fork event: 4
Issue comment event: 1
Pull request event: 16
Pull request review event: 5
Push event: 27
Release event: 2
Watch event: 1
Total: 74

Committers metadata

Last synced: 3 days ago

Total Commits: 239
Total Committers: 17
Avg Commits per committer: 14.059
Development Distribution Score (DDS): 0.607

Commits in past year: 27
Committers in past year: 7
Avg Commits per committer in past year: 3.857
Development Distribution Score (DDS) in past year: 0.556

Name	Email	Commits
Kat Marchán	k**m@s**g	94
dependabot[bot]	4****]	46
Luke Karrys	l**e@l**m	24
isaacs	i**@i**e	18
github-actions[bot]	4****]	14
Gar	g**h@d**r	12
Michael Smith	o**t@g**m	8
Chris Sidi	h**s@g**m	5
claudiahdz	c**0@g**m	4
nlf	q**k@g**m	4
Vinicius Lourenço	1****d	4
Ahmed Walid Elhakim	5****m	1
Dirk Stolle	s**v@w**e	1
Eric Cornelissen	e**n@g**m	1
Lewis Hemens	m**e@l**m	1
Ryan Day	s**r@g**m	1
npm CLI robot	n**t@g**m	1

Issue and Pull Request metadata

Last synced: 16 days ago

Total issues: 11
Total pull requests: 169
Average time to close issues: 3 months
Average time to close pull requests: 12 days
Total issue authors: 11
Total pull request authors: 16
Average comments per issue: 1.82
Average comments per pull request: 1.0
Merged pull request: 90
Bot issues: 1
Bot pull requests: 132

Past year issues: 1
Past year pull requests: 23
Past year average time to close issues: 4 days
Past year average time to close pull requests: 6 days
Past year issue authors: 1
Past year pull request authors: 4
Past year average comments per issue: 0.0
Past year average comments per pull request: 0.61
Past year merged pull request: 21
Past year bot issues: 1
Past year bot pull requests: 19

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/npm/ssri

Top Issue Authors

github-campaigns[bot] (1)
tsteuwer (1)
isaacs (1)
pasieronen (1)
igibek (1)
mikemimik (1)
gitcloned (1)
AndrewGibson27 (1)
dave-smartystreets (1)
JamieSlome (1)
chrisschaub (1)

Top Pull Request Authors

dependabot[bot] (115)
github-actions[bot] (17)
wraithgar (6)
owlstronaut (5)
hashtagchris (4)
claudiahdz (4)
H4ad (4)
nlf (3)
lukekarrys (2)
striezel (2)
isaacs (2)
0verk1ll (1)
ericcornelissen (1)
lewish (1)
ahmedwelhakim (1)

Top Issue Labels

Bug (1)
Needs Triage (1)

Top Pull Request Labels

Dependencies (113)
autorelease: tagged (12)
autorelease: pending (5)

Package metadata

Total packages: 13
Total downloads:
- npm: 260,832,939 last-month
Total docker downloads: 14,066,929,912
Total dependent packages: 847 (may contain duplicates)
Total dependent repositories: 951,034 (may contain duplicates)
Total versions: 111
Total maintainers: 5
Total advisories: 2

npmjs.org: ssri

Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.

Homepage: https://github.com/npm/ssri#readme
Licenses: ISC
Latest release: 14.0.0 (published about 1 month ago)
Last Synced: 2026-06-18T03:14:05.228Z (2 days ago)
Versions: 44
Dependent Packages: 838
Dependent Repositories: 951,034
Downloads: 260,832,920 Last month
Docker Downloads: 14,066,929,912
Rankings:
- Docker downloads count: 0.002%
- Downloads: 0.011%
- Dependent repos count: 0.036%
- Dependent packages count: 0.079%
- Average: 1.841%
- Forks count: 4.995%
- Stargazers count: 5.923%
Maintainers (4)
Advisories:
- Regular Expression Denial of Service (ReDoS)
- Regular Expression Denial of Service in ssri

proxy.golang.org: github.com/npm/ssri

Homepage:
Documentation: https://pkg.go.dev/github.com/npm/ssri#section-documentation
Licenses:
Latest release: v14.0.0+incompatible (published about 1 month ago)
Last Synced: 2026-06-16T20:00:28.399Z (3 days ago)
Versions: 44
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent packages count: 4.736%
- Average: 4.895%
- Dependent repos count: 5.054%

repo1.maven.org: org.webjars.npm:ssri

WebJar for ssri

Homepage: https://www.webjars.org
Documentation: https://appdoc.app/artifact/org.webjars.npm/ssri/
Licenses: ISC
Latest release: 12.0.0 (published about 1 year ago)
Last Synced: 2026-06-16T20:00:25.024Z (3 days ago)
Versions: 13
Dependent Packages: 9
Dependent Repositories: 0
Rankings:
- Dependent packages count: 6.414%
- Average: 19.197%
- Dependent repos count: 31.98%

npmjs.org: @vssuser2/ssri

Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.

Homepage: https://github.com/npm/ssri#readme
Licenses: ISC
Latest release: 8.0.1-vss.ssri.0 (published about 2 months ago)
Last Synced: 2026-06-16T20:00:28.883Z (3 days ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Downloads: 19 Last month
Rankings:
- Dependent repos count: 21.965%
- Average: 26.812%
- Dependent packages count: 31.66%
Maintainers (1)
- vssuser2

ubuntu-23.10: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 9.0.1-2 (published 4 months ago)
Last Synced: 2026-03-13T22:20:48.027Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

ubuntu-20.04: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 7.1.0-2 (published 4 months ago)
Last Synced: 2026-03-13T18:30:36.036Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

ubuntu-24.10: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 9.0.1-3 (published 4 months ago)
Last Synced: 2026-03-09T07:28:22.470Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

debian-11: node-ssri

Homepage: https://github.com/npm/ssri#readme
Documentation: https://packages.debian.org/bullseye/node-ssri
Licenses:
Latest release: 8.0.1-2 (published 4 months ago)
Last Synced: 2026-03-14T02:21:35.101Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

ubuntu-23.04: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 9.0.1-2 (published 4 months ago)
Last Synced: 2026-03-11T11:04:13.858Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

ubuntu-22.04: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 8.0.1-2 (published 4 months ago)
Last Synced: 2026-03-07T16:32:39.369Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

debian-13: node-ssri

Homepage: https://github.com/npm/ssri#readme
Documentation: https://packages.debian.org/trixie/node-ssri
Licenses:
Latest release: 9.0.1-3 (published 4 months ago)
Last Synced: 2026-03-14T07:07:48.220Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

debian-12: node-ssri

Homepage: https://github.com/npm/ssri#readme
Documentation: https://packages.debian.org/bookworm/node-ssri
Licenses:
Latest release: 9.0.1-2 (published 4 months ago)
Last Synced: 2026-03-13T21:50:10.818Z (3 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

ubuntu-24.04: node-ssri

Homepage: https://github.com/npm/ssri#readme
Licenses:
Latest release: 9.0.1-2 (published 4 months ago)
Last Synced: 2026-03-06T07:03:18.889Z (4 months ago)
Versions: 1
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 0.0%
- Dependent packages count: 0.0%
- Average: 100%

Dependencies

package.json npm

@npmcli/eslint-config ^3.0.1 development
@npmcli/template-oss 3.6.0 development
tap ^16.0.1 development
minipass ^3.1.1

.github/workflows/audit.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite

.github/workflows/ci-release.yml actions

LouisBrunner/checks-action v1.3.1 composite
actions/checkout v3 composite
actions/github-script v6 composite
actions/setup-node v3 composite

.github/workflows/ci.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite

.github/workflows/codeql-analysis.yml actions

actions/checkout v3 composite
github/codeql-action/analyze v2 composite
github/codeql-action/init v2 composite

.github/workflows/post-dependabot.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite
dependabot/fetch-metadata v1 composite

.github/workflows/pull-request.yml actions

actions/checkout v3 composite
actions/setup-node v3 composite

.github/workflows/release.yml actions

LouisBrunner/checks-action v1.3.1 composite
actions/checkout v3 composite
actions/github-script v6 composite
actions/setup-node v3 composite

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Summary