Data

Tools

Indexes

Applications

Experiments

Summary

An open API service for producing an overview of a list of open source projects.

https://github.com/theupdateframework/tuf-js

package-security

Score: 30.417591346332838

Last synced: about 16 hours ago
JSON representation

Repository metadata:

JavaScript implementation of The Update Framework (TUF)

Owner metadata:

GitHub Events

Total
Last Year

Committers metadata

Last synced: 9 days ago

Total Commits: 724
Total Committers: 8
Avg Commits per committer: 90.5
Development Distribution Score (DDS): 0.318

Commits in past year: 47
Committers in past year: 5
Avg Commits per committer in past year: 9.4
Development Distribution Score (DDS) in past year: 0.277

Name Email Commits
dependabot[bot] 4****] 494
Brian DeHamer b****r@g****m 96
eugene e****b@g****m 90
github-actions[bot] 4****] 30
eugenejahn e****n@e****l 9
Oscar DeHamer 1****r 2
Jonas Claes j****1@o****m 2
Jussi Kukkonen j****u@g****i 1

Issue and Pull Request metadata

Last synced: 9 days ago

Total issues: 19
Total pull requests: 986
Average time to close issues: 26 days
Average time to close pull requests: 3 days
Total issue authors: 8
Total pull request authors: 8
Average comments per issue: 0.79
Average comments per pull request: 0.36
Merged pull request: 557
Bot issues: 6
Bot pull requests: 899

Past year issues: 2
Past year pull requests: 71
Past year average time to close issues: about 1 month
Past year average time to close pull requests: 12 days
Past year issue authors: 2
Past year pull request authors: 5
Past year average comments per issue: 0.0
Past year average comments per pull request: 0.38
Past year merged pull request: 12
Past year bot issues: 1
Past year bot pull requests: 66

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/theupdateframework/tuf-js

Top Issue Authors

  • dependabot[bot] (6)
  • bdehamer (6)
  • ejahnGithub (2)
  • lsd-cat (1)
  • marcodali (1)
  • akorchyn (1)
  • EinfachHans (1)
  • kommendorkapten (1)

Top Pull Request Authors

  • dependabot[bot] (867)
  • bdehamer (65)
  • github-actions[bot] (32)
  • ejahnGithub (17)
  • aduh95 (2)
  • odehamer (1)
  • LingKa28 (1)
  • owlstronaut (1)

Top Issue Labels

  • dependencies (6)
  • javascript (5)
  • bug (4)
  • github_actions (1)

Top Pull Request Labels

  • dependencies (867)
  • javascript (706)
  • github_actions (161)

Package metadata

npmjs.org: tuf-js

JavaScript implementation of The Update Framework (TUF)

  • Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/client#readme
  • Licenses: MIT
  • Latest release: 6.0.0 (published about 2 months ago)
  • Last Synced: 2026-07-09T06:02:56.221Z (14 days ago)
  • Versions: 27
  • Dependent Packages: 19
  • Dependent Repositories: 87,759
  • Downloads: 39,469,200 Last month
  • Docker Downloads: 7,974,271,583
  • Rankings:
    • Docker downloads count: 0.011%
    • Downloads: 0.075%
    • Dependent repos count: 0.104%
    • Dependent packages count: 1.237%
    • Average: 2.545%
    • Stargazers count: 5.64%
    • Forks count: 8.201%
  • Maintainers (2)
npmjs.org: @tufjs/canonical-json

OLPC JSON canonicalization

  • Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/canonical-json#readme
  • Licenses: MIT
  • Latest release: 2.0.0 (published almost 3 years ago)
  • Last Synced: 2026-07-09T06:02:55.619Z (14 days ago)
  • Versions: 2
  • Dependent Packages: 3
  • Dependent Repositories: 82,512
  • Downloads: 35,222,925 Last month
  • Docker Downloads: 7,748,338,607
  • Rankings:
    • Downloads: 0.076%
    • Dependent repos count: 0.107%
    • Docker downloads count: 0.3%
    • Average: 3.369%
    • Stargazers count: 5.64%
    • Dependent packages count: 5.889%
    • Forks count: 8.201%
  • Maintainers (2)
npmjs.org: @tufjs/models

TUF metadata models

  • Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/models#readme
  • Licenses: MIT
  • Latest release: 5.0.0 (published about 2 months ago)
  • Last Synced: 2026-07-09T06:02:54.949Z (14 days ago)
  • Versions: 14
  • Dependent Packages: 2
  • Dependent Repositories: 87,476
  • Downloads: 36,152,899 Last month
  • Docker Downloads: 7,749,484,057
  • Rankings:
    • Docker downloads count: 0.015%
    • Downloads: 0.075%
    • Dependent repos count: 0.104%
    • Average: 3.812%
    • Stargazers count: 5.64%
    • Forks count: 8.201%
    • Dependent packages count: 8.835%
  • Maintainers (2)
npmjs.org: @tufjs/repo-mock

HTTP mocking for TUF repository requests

  • Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/repo-mock#readme
  • Licenses: MIT
  • Latest release: 5.0.0 (published about 2 months ago)
  • Last Synced: 2026-07-09T06:02:55.370Z (14 days ago)
  • Versions: 19
  • Dependent Packages: 6
  • Dependent Repositories: 39
  • Downloads: 14,083 Last month
  • Rankings:
    • Dependent repos count: 2.071%
    • Downloads: 2.199%
    • Dependent packages count: 3.152%
    • Average: 4.253%
    • Stargazers count: 5.64%
    • Forks count: 8.201%
  • Maintainers (2)
proxy.golang.org: github.com/theupdateframework/tuf-js

npmjs.org: @tufjs/cli

CLI for interacting with TUF repositories

  • Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/cli#readme
  • Licenses: MIT
  • Latest release: 0.6.0 (published about 2 months ago)
  • Last Synced: 2026-07-09T06:02:56.098Z (14 days ago)
  • Versions: 14
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Downloads: 360 Last month
  • Rankings:
    • Stargazers count: 5.84%
    • Forks count: 8.455%
    • Average: 26.223%
    • Dependent repos count: 37.328%
    • Dependent packages count: 53.27%
  • Maintainers (2)
repo1.maven.org: org.mvnpm.at.tufjs:models

TUF metadata models

  • Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/models#readme
  • Documentation: https://appdoc.app/artifact/org.mvnpm.at.tufjs/models/
  • Licenses: MIT
  • Latest release: 5.0.0 (published about 2 months ago)
  • Last Synced: 2026-07-09T06:02:53.015Z (14 days ago)
  • Versions: 5
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 32.942%
    • Average: 40.019%
    • Dependent packages count: 47.095%
repo1.maven.org: org.mvnpm:tuf-js

JavaScript implementation of The Update Framework (TUF)

  • Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/client#readme
  • Documentation: https://appdoc.app/artifact/org.mvnpm/tuf-js/
  • Licenses: MIT
  • Latest release: 6.0.0 (published about 2 months ago)
  • Last Synced: 2026-07-09T06:02:53.020Z (14 days ago)
  • Versions: 6
  • Dependent Packages: 0
  • Dependent Repositories: 0
  • Rankings:
    • Dependent repos count: 33.428%
    • Average: 40.609%
    • Dependent packages count: 47.79%

Dependencies

.github/workflows/build-sign-verify.yml actions
  • actions/checkout 93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 composite
  • actions/setup-node 8c91899e586c5b171469028077307d293428b516 composite
.github/workflows/publish.yml actions
  • actions/checkout 93ea575cb5d8a053eaa0ac8fa3b40d7e05a33cc8 composite
  • actions/setup-node 8c91899e586c5b171469028077307d293428b516 composite
package-lock.json npm
  • 466 dependencies
package.json npm
  • @tsconfig/node12 ^1.0.11 development
  • @types/jest ^28.1.8 development
  • @types/lodash.isequal ^4.5.6 development
  • @types/make-fetch-happen ^10.0.1 development
  • @types/minimatch ^5.1.2 development
  • @types/node ^18.11.10 development
  • @typescript-eslint/eslint-plugin ^5.45.0 development
  • @typescript-eslint/parser ^5.45.0 development
  • eslint ^8.28.0 development
  • eslint-config-prettier ^8.5.0 development
  • eslint-plugin-prettier ^4.2.1 development
  • http-server ^14.1.1 development
  • jest ^28.1.3 development
  • nock ^13.2.9 development
  • prettier ^2.8.0 development
  • ts-jest ^28.0.8 development
  • typescript ^4.9.3 development
  • make-fetch-happen ^11.0.1
  • minimatch ^5.1.1