https://github.com/theupdateframework/tuf-js

package-security

Score: 30.42941002353249

Last synced: about 3 hours ago
JSON representation

Repository metadata:

JavaScript implementation of The Update Framework (TUF)

Host: GitHub
URL: https://github.com/theupdateframework/tuf-js
Owner: theupdateframework
License: mit
Created: 2022-08-26T23:29:22.000Z (about 4 years ago)
Default Branch: main
Last Pushed: 2026-08-03T13:03:44.000Z (about 1 month ago)
Last Synced: 2026-08-07T04:29:16.445Z (about 1 month ago)
Topics: package-security
Language: TypeScript
Homepage:
Size: 4 MB
Stars: 83
Watchers: 3
Forks: 8
Open Issues: 4
Metadata Files:
- Readme: README.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
- Codeowners: CODEOWNERS
- Security: SECURITY.md
- Support: SUPPORT.md

Owner metadata:

Name: The Update Framework (TUF)
Login: theupdateframework
Email: theupdateframework@googlegroups.com
Kind: organization
Description: A framework for securing software update systems
Website: https://theupdateframework.com/
Location: NYU Tandon School of Engineering, 6 MetroTech Center Brooklyn, NY 11201
Twitter:
Company:
Icon url: https://avatars.githubusercontent.com/u/4633028?v=4
Repositories: 17
Last Synced at: 2024-03-27T00:14:20.754Z
Profile URL: https://github.com/theupdateframework

GitHub Events

Total

Create event: 128
Delete event: 128
Fork event: 2
Issue comment event: 77
Issues event: 3
Pull request event: 231
Pull request review comment event: 2
Pull request review event: 65
Push event: 129
Release event: 5
Watch event: 6
Total: 776

Last Year

Create event: 31
Delete event: 35
Issue comment event: 7
Issues event: 2
Pull request event: 47
Pull request review event: 14
Push event: 38
Release event: 1
Total: 175

Committers metadata

Last synced: 1 day ago

Total Commits: 724
Total Committers: 8
Avg Commits per committer: 90.5
Development Distribution Score (DDS): 0.318

Commits in past year: 42
Committers in past year: 5
Avg Commits per committer in past year: 8.4
Development Distribution Score (DDS) in past year: 0.262

Name	Email	Commits
dependabot[bot]	4****]	494
Brian DeHamer	b**r@g**m	96
eugene	e**b@g**m	90
github-actions[bot]	4****]	30
eugenejahn	e**n@e**l	9
Oscar DeHamer	1****r	2
Jonas Claes	j**1@o**m	2
Jussi Kukkonen	j**u@g**i	1

Issue and Pull Request metadata

Last synced: 1 day ago

Total issues: 19
Total pull requests: 994
Average time to close issues: 26 days
Average time to close pull requests: 3 days
Total issue authors: 8
Total pull request authors: 8
Average comments per issue: 0.79
Average comments per pull request: 0.37
Merged pull request: 557
Bot issues: 6
Bot pull requests: 907

Past year issues: 1
Past year pull requests: 68
Past year average time to close issues: 16 days
Past year average time to close pull requests: 13 days
Past year issue authors: 1
Past year pull request authors: 5
Past year average comments per issue: 0.0
Past year average comments per pull request: 0.49
Past year merged pull request: 9
Past year bot issues: 0
Past year bot pull requests: 64

More stats: https://issues.ecosyste.ms/repositories/lookup?url=https://github.com/theupdateframework/tuf-js

Top Issue Authors

dependabot[bot] (6)
bdehamer (6)
ejahnGithub (2)
lsd-cat (1)
marcodali (1)
akorchyn (1)
EinfachHans (1)
kommendorkapten (1)

Top Pull Request Authors

dependabot[bot] (875)
bdehamer (65)
github-actions[bot] (32)
ejahnGithub (17)
aduh95 (2)
odehamer (1)
LingKa28 (1)
owlstronaut (1)

Top Issue Labels

dependencies (6)
javascript (5)
bug (4)
github_actions (1)

Top Pull Request Labels

dependencies (875)
javascript (712)
github_actions (163)

Package metadata

Total packages: 8
Total downloads:
- npm: 116,941,305 last-month
Total docker downloads: 23,472,094,247
Total dependent packages: 30 (may contain duplicates)
Total dependent repositories: 257,786 (may contain duplicates)
Total versions: 95
Total maintainers: 2

npmjs.org: tuf-js

JavaScript implementation of The Update Framework (TUF)

Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/client#readme
Licenses: MIT
Latest release: 6.0.0 (published 3 months ago)
Last Synced: 2026-09-10T21:44:07.711Z (1 day ago)
Versions: 27
Dependent Packages: 19
Dependent Repositories: 87,759
Downloads: 40,908,367 Last month
Docker Downloads: 7,974,271,583
Rankings:
- Docker downloads count: 0.011%
- Downloads: 0.075%
- Dependent repos count: 0.104%
- Dependent packages count: 1.237%
- Average: 2.545%
- Stargazers count: 5.64%
- Forks count: 8.201%
Maintainers (2)
- bdehamer
- eugenethehub

npmjs.org: @tufjs/canonical-json

OLPC JSON canonicalization

Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/canonical-json#readme
Licenses: MIT
Latest release: 2.0.0 (published about 3 years ago)
Last Synced: 2026-09-10T21:40:59.788Z (1 day ago)
Versions: 2
Dependent Packages: 3
Dependent Repositories: 82,512
Downloads: 36,192,084 Last month
Docker Downloads: 7,748,338,607
Rankings:
- Downloads: 0.076%
- Dependent repos count: 0.107%
- Docker downloads count: 0.3%
- Average: 3.369%
- Stargazers count: 5.64%
- Dependent packages count: 5.889%
- Forks count: 8.201%
Maintainers (2)
- bdehamer
- eugenethehub

npmjs.org: @tufjs/models

TUF metadata models

Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/models#readme
Licenses: MIT
Latest release: 5.0.0 (published 3 months ago)
Last Synced: 2026-09-10T21:43:36.013Z (1 day ago)
Versions: 14
Dependent Packages: 2
Dependent Repositories: 87,476
Downloads: 39,830,626 Last month
Docker Downloads: 7,749,484,057
Rankings:
- Docker downloads count: 0.015%
- Downloads: 0.075%
- Dependent repos count: 0.104%
- Average: 3.812%
- Stargazers count: 5.64%
- Forks count: 8.201%
- Dependent packages count: 8.835%
Maintainers (2)
- bdehamer
- eugenethehub

npmjs.org: @tufjs/repo-mock

HTTP mocking for TUF repository requests

Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/repo-mock#readme
Licenses: MIT
Latest release: 5.0.0 (published 3 months ago)
Last Synced: 2026-09-10T21:42:21.754Z (1 day ago)
Versions: 19
Dependent Packages: 6
Dependent Repositories: 39
Downloads: 10,166 Last month
Rankings:
- Dependent repos count: 2.071%
- Downloads: 2.199%
- Dependent packages count: 3.152%
- Average: 4.253%
- Stargazers count: 5.64%
- Forks count: 8.201%
Maintainers (2)
- bdehamer
- eugenethehub

proxy.golang.org: github.com/theupdateframework/tuf-js

Homepage:
Documentation: https://pkg.go.dev/github.com/theupdateframework/tuf-js#section-documentation
Licenses: mit
Latest release: v1.0.0 (published over 3 years ago)
Last Synced: 2026-09-10T21:36:25.959Z (1 day ago)
Versions: 8
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent packages count: 4.811%
- Average: 4.973%
- Dependent repos count: 5.135%

npmjs.org: @tufjs/cli

CLI for interacting with TUF repositories

Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/cli#readme
Licenses: MIT
Latest release: 0.6.0 (published 3 months ago)
Last Synced: 2026-09-10T21:38:16.691Z (1 day ago)
Versions: 14
Dependent Packages: 0
Dependent Repositories: 0
Downloads: 62 Last month
Rankings:
- Stargazers count: 5.84%
- Forks count: 8.455%
- Average: 26.223%
- Dependent repos count: 37.328%
- Dependent packages count: 53.27%
Maintainers (2)
- bdehamer
- eugenethehub

repo1.maven.org: org.mvnpm.at.tufjs:models

TUF metadata models

Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/models#readme
Documentation: https://appdoc.app/artifact/org.mvnpm.at.tufjs/models/
Licenses: MIT
Latest release: 5.0.0 (published 3 months ago)
Last Synced: 2026-09-10T21:33:23.244Z (1 day ago)
Versions: 5
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 32.942%
- Average: 40.019%
- Dependent packages count: 47.095%

repo1.maven.org: org.mvnpm:tuf-js

JavaScript implementation of The Update Framework (TUF)

Homepage: https://github.com/theupdateframework/tuf-js/tree/main/packages/client#readme
Documentation: https://appdoc.app/artifact/org.mvnpm/tuf-js/
Licenses: MIT
Latest release: 6.0.0 (published 3 months ago)
Last Synced: 2026-09-10T21:33:32.465Z (1 day ago)
Versions: 6
Dependent Packages: 0
Dependent Repositories: 0
Rankings:
- Dependent repos count: 33.428%
- Average: 40.609%
- Dependent packages count: 47.79%

Dependencies

package-lock.json npm

466 dependencies

package.json npm

@tsconfig/node12 ^1.0.11 development
@types/jest ^28.1.8 development
@types/lodash.isequal ^4.5.6 development
@types/make-fetch-happen ^10.0.1 development
@types/minimatch ^5.1.2 development
@types/node ^18.11.10 development
@typescript-eslint/eslint-plugin ^5.45.0 development
@typescript-eslint/parser ^5.45.0 development
eslint ^8.28.0 development
eslint-config-prettier ^8.5.0 development
eslint-plugin-prettier ^4.2.1 development
http-server ^14.1.1 development
jest ^28.1.3 development
nock ^13.2.9 development
prettier ^2.8.0 development
ts-jest ^28.0.8 development
typescript ^4.9.3 development
make-fetch-happen ^11.0.1
minimatch ^5.1.1

.github/workflows/scorecard.yml actions

actions/checkout de0fac2e4500dabe0009e67214ff5f5447ce83dd composite
actions/upload-artifact 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a composite
github/codeql-action/upload-sarif 87557b9c84dde89fdd9b10e88954ac2f4248e463 composite
ossf/scorecard-action 4eaacf0543bb3f2c246792bd56e8cdeffafb205a composite

packages/client/package.json npm

@tufjs/repo-mock 5.0.0 development
@types/debug ^4.1.13 development
@types/retry ^0.12.5 development
@gar/promise-retry ^1.0.3
@tufjs/models 5.0.0
debug ^4.4.3

.github/workflows/conformance.yml actions

actions/checkout de0fac2e4500dabe0009e67214ff5f5447ce83dd composite
actions/setup-node 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e composite
theupdateframework/tuf-conformance 500c525c9ce287a472fd334fe8d885cace667d32 composite

packages/repo-mock/package.json npm

@tufjs/models 5.0.0
nock ^14.0.11

.github/workflows/smoke-test.yml actions

actions/checkout de0fac2e4500dabe0009e67214ff5f5447ce83dd composite
actions/setup-node 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e composite

packages/canonical-json/package.json npm

.github/workflows/ci.yml actions

actions/checkout de0fac2e4500dabe0009e67214ff5f5447ce83dd composite
actions/setup-node 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e composite

packages/cli/package.json npm

oclif ^4.23.10 development
shx ^0.4.0 development
tslib ^2.8.1 development
@oclif/color ^1.0.13
@oclif/core ^4
@oclif/plugin-help ^6
tuf-js 6.0.0

.github/workflows/release.yml actions

actions/checkout de0fac2e4500dabe0009e67214ff5f5447ce83dd composite
actions/setup-node 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e composite
changesets/action 63a615b9cd06ba9a3e6d13796c7fbcb080a60a0b composite

packages/models/package.json npm

@tufjs/canonical-json 2.0.0
minimatch ^10.2.1

ecosyste.ms

Data

Tools

Indexes

Applications

Experiments

Summary

https://github.com/theupdateframework/tuf-js

Repository metadata:

Owner metadata:

GitHub Events

Total

Last Year

Committers metadata

Issue and Pull Request metadata

Top Issue Authors

Top Pull Request Authors

Top Issue Labels

Top Pull Request Labels

Package metadata

npmjs.org: tuf-js

npmjs.org: @tufjs/canonical-json

npmjs.org: @tufjs/models

npmjs.org: @tufjs/repo-mock

proxy.golang.org: github.com/theupdateframework/tuf-js

npmjs.org: @tufjs/cli

repo1.maven.org: org.mvnpm.at.tufjs:models

repo1.maven.org: org.mvnpm:tuf-js

Dependencies