https://github.com/SonarSource/sonar-scanner-npm
Score: 22.74121005236404
Last synced: about 11 hours ago
JSON representation
Repository metadata:
SonarQube Scanner for the JavaScript world
- Host: GitHub
- URL: https://github.com/SonarSource/sonar-scanner-npm
- Owner: SonarSource
- License: lgpl-3.0
- Created: 2022-12-06T13:34:21.000Z (almost 4 years ago)
- Default Branch: master
- Last Pushed: 2026-10-28T14:55:38.000Z (6 days ago)
- Last Synced: 2026-10-29T04:28:08.928Z (6 days ago)
- Language: TypeScript
- Homepage:
- Size: 2.55 MB
- Stars: 59
- Watchers: 0
- Forks: 31
- Open Issues: 1
-
Metadata Files:
- Readme: README.md
- License: LICENSE
- Codeowners: .github/CODEOWNERS
- Security: SECURITY.md
- Claude: CLAUDE.md
Owner metadata:
- Name: Sonar
- Login: SonarSource
- Email: github@sonarsource.com
- Kind: organization
- Description: The home of integrated code quality and code security
- Website: https://www.sonarsource.com
- Location: Switzerland
- Twitter: SonarSource
- Company:
- Icon url: https://avatars.githubusercontent.com/u/545988?v=4
- Repositories: 226
- Last Synced at: 2026-11-02T11:09:24.107Z
- Profile URL: https://github.com/SonarSource
GitHub Events
Total
- Create event: 234
- Delete event: 221
- Fork event: 6
- Issue comment event: 301
- Pull request event: 261
- Pull request review comment event: 26
- Pull request review event: 135
- Push event: 401
- Release event: 37
- Watch event: 8
- Total: 1630
Last Year
- Create event: 120
- Delete event: 121
- Fork event: 1
- Issue comment event: 62
- Pull request event: 108
- Pull request review comment event: 12
- Pull request review event: 47
- Push event: 169
- Total: 640
Committers metadata
Last synced: 2 days ago
Total Commits: 830
Total Committers: 44
Avg Commits per committer: 18.864
Development Distribution Score (DDS): 0.478
Commits in past year: 394
Committers in past year: 10
Avg Commits per committer in past year: 39.4
Development Distribution Score (DDS) in past year: 0.114
| Name | Commits | |
|---|---|---|
| renovate[bot] | 2****] | 433 |
| Fabrice Bellingard | f****d@s****m | 129 |
| 7PH | b****d@s****m | 43 |
| Victor | v****z@s****m | 38 |
| Tibor Blenessy | t****y@s****m | 21 |
| Ilia Kebets | 1****e | 21 |
| zglicz | m****i@s****m | 19 |
| 刘祺 | g****g@g****m | 18 |
| Lucas | 9****e | 17 |
| Ilia Kebets | i****s@s****m | 12 |
| gabssnake | g****e@g****m | 10 |
| Yassin Kammoun | 5****e | 8 |
| Victor | 1****e | 7 |
| Eric Morand | 1****e | 4 |
| sonarqube-agent[bot] | 2****] | 4 |
| csturiale | c****e | 4 |
| Julien HENRY | j****y@s****m | 4 |
| Dorian Burihabwa | 7****e | 3 |
| Pavel Mikula | 5****e | 3 |
| Daniel Pereira Volpato | d****o | 3 |
| Tom | t****n@s****m | 2 |
| Samir M | m****o@g****m | 2 |
| Roman Balayan | r****n@g****m | 2 |
| Michael Gumowski | m****i@s****m | 2 |
| David Andersson | 5****n | 2 |
| Amanda Munoz | a****z@p****o | 1 |
| Eric Lorenzana | e****a@s****m | 1 |
| Sebastian Plaza | s****a@g****m | 1 |
| Serhii Zadorozhnyi | s****i@r****m | 1 |
| Alban Auzeill | a****l@s****m | 1 |
| and 14 more... | ||
Issue and Pull Request metadata
Last synced: 2 days ago
Total issues: 29
Total pull requests: 471
Average time to close issues: about 2 months
Average time to close pull requests: 4 days
Total issue authors: 21
Total pull request authors: 39
Average comments per issue: 1.07
Average comments per pull request: 1.11
Merged pull request: 378
Bot issues: 0
Bot pull requests: 189
Past year issues: 0
Past year pull requests: 154
Past year average time to close issues: N/A
Past year average time to close pull requests: 2 days
Past year issue authors: 0
Past year pull request authors: 9
Past year average comments per issue: 0
Past year average comments per pull request: 1.48
Past year merged pull request: 138
Past year bot issues: 0
Past year bot pull requests: 136
Top Issue Authors
- ilia-kebets-sonarsource (7)
- alexvarelaAA (2)
- saberduck (2)
- ciandt-crodrigues (1)
- monwolf (1)
- ricochetbrown (1)
- jero-dev (1)
- cfecherolle (1)
- oluwenzo (1)
- marco-carvalho (1)
- ericmorand-sonarsource (1)
- YozhEzhi (1)
- matthiasbaldi (1)
- mlawrence999 (1)
- skv-anders (1)
Top Pull Request Authors
- renovate[bot] (188)
- 7PH (62)
- lucas-paulger-sonarsource (34)
- vdiez (28)
- saberduck (26)
- ilia-kebets-sonarsource (26)
- kebetsi (12)
- yassin-kammoun-sonarsource (12)
- ericmorand-sonarsource (12)
- zglicz (11)
- victor-diez-sonarsource (6)
- ericmorand (4)
- SamirM-BE (4)
- pavel-mikula-sonarsource (4)
- Wohops (4)
Top Issue Labels
- must-have (1)
Top Pull Request Labels
- dependencies (188)
- scheduled-remediation (1)
- autorelease: published (1)
Package metadata
- Total packages: 2
-
Total downloads:
- npm: 2,803,319 last-month
- Total docker downloads: 43,923
- Total dependent packages: 393 (may contain duplicates)
- Total dependent repositories: 1,804 (may contain duplicates)
- Total versions: 80
- Total maintainers: 15
npmjs.org: sonarqube-scanner
SonarQube/SonarCloud Scanner for the JavaScript world
- Homepage: https://docs.sonarsource.com/sonarqube-server/latest/analyzing-source-code/scanners/npm/introduction/
- Licenses: LGPL-3.0-only
- Latest release: 5.0.2 (published 22 days ago)
- Last Synced: 2026-11-02T03:05:48.813Z (2 days ago)
- Versions: 63
- Dependent Packages: 393
- Dependent Repositories: 1,804
- Downloads: 2,349,781 Last month
- Docker Downloads: 43,923
-
Rankings:
- Dependent packages count: 0.141%
- Downloads: 0.214%
- Dependent repos count: 0.489%
- Docker downloads count: 0.903%
- Average: 2.547%
- Forks count: 6.747%
- Stargazers count: 6.789%
- Maintainers (15)
npmjs.org: @sonar/scan
SonarQube/SonarCloud Scanner for the JavaScript world
- Homepage: https://docs.sonarsource.com/sonarqube-server/latest/analyzing-source-code/scanners/npm/introduction/
- Licenses: LGPL-3.0-only
- Latest release: 5.0.2 (published 22 days ago)
- Last Synced: 2026-11-02T03:05:48.440Z (2 days ago)
- Versions: 17
- Dependent Packages: 0
- Dependent Repositories: 0
- Downloads: 453,538 Last month
-
Rankings:
- Forks count: 5.19%
- Stargazers count: 5.436%
- Average: 17.956%
- Dependent repos count: 25.016%
- Dependent packages count: 36.181%
- Maintainers (1)
Dependencies
test/integration/package-lock.json
npm
- @esbuild/aix-ppc64 0.27.2 development
- @esbuild/android-arm 0.27.2 development
- @esbuild/android-arm64 0.27.2 development
- @esbuild/android-x64 0.27.2 development
- @esbuild/darwin-arm64 0.27.2 development
- @esbuild/darwin-x64 0.27.2 development
- @esbuild/freebsd-arm64 0.27.2 development
- @esbuild/freebsd-x64 0.27.2 development
- @esbuild/linux-arm 0.27.2 development
- @esbuild/linux-arm64 0.27.2 development
- @esbuild/linux-ia32 0.27.2 development
- @esbuild/linux-loong64 0.27.2 development
- @esbuild/linux-mips64el 0.27.2 development
- @esbuild/linux-ppc64 0.27.2 development
- @esbuild/linux-riscv64 0.27.2 development
- @esbuild/linux-s390x 0.27.2 development
- @esbuild/linux-x64 0.27.2 development
- @esbuild/netbsd-arm64 0.27.2 development
- @esbuild/netbsd-x64 0.27.2 development
- @esbuild/openbsd-arm64 0.27.2 development
- @esbuild/openbsd-x64 0.27.2 development
- @esbuild/openharmony-arm64 0.27.2 development
- @esbuild/sunos-x64 0.27.2 development
- @esbuild/win32-arm64 0.27.2 development
- @esbuild/win32-ia32 0.27.2 development
- @esbuild/win32-x64 0.27.2 development
- @types/node 24.10.4 development
- esbuild 0.27.2 development
- fsevents 2.3.3 development
- get-tsconfig 4.13.0 development
- resolve-pkg-maps 1.0.0 development
- tsx 4.21.0 development
- undici-types 7.16.0 development
- @sonar/scan SNAPSHOT
- adm-zip 0.5.16
- asynckit 0.4.0
- axios 1.13.2
- b4a 1.7.3
- bare-events 2.8.2
- call-bind-apply-helpers 1.0.2
- combined-stream 1.0.8
- commander 13.1.0
- delayed-stream 1.0.0
- dunder-proto 1.0.1
- es-define-property 1.0.1
- es-errors 1.3.0
- es-object-atoms 1.1.1
- es-set-tostringtag 2.1.0
- events-universal 1.0.1
- fast-fifo 1.3.2
- follow-redirects 1.15.11
- form-data 4.0.5
- fs-extra 11.3.3
- function-bind 1.1.2
- get-intrinsic 1.3.0
- get-proto 1.0.1
- gopd 1.2.0
- graceful-fs 4.2.11
- has-symbols 1.1.0
- has-tostringtag 1.0.2
- hasown 2.0.2
- hpagent 1.2.0
- jsonfile 6.2.0
- math-intrinsics 1.1.0
- mime-db 1.52.0
- mime-types 2.1.35
- mkdirp 3.0.1
- node-forge 1.3.3
- properties-file 3.6.3
- proxy-from-env 1.1.0
- semver 7.7.3
- slugify 1.6.6
- streamx 2.23.0
- tar-stream 3.1.7
- text-decoder 1.2.3
- universalify 2.0.1
.github/workflows/release.yml
actions
- SonarSource/jfrog-setup-wrapper eb712d76540e5d1f3756303f30387657fb204e52 composite
- SonarSource/vault-action-wrapper d1c1ab4ca5ad07fd9cdfe1eff038a39673dfca64 composite
- actions/checkout v3 composite
- actions/setup-node v3 composite
.github/workflows/build.yml
actions
test/unit/fixtures/fake_project_with_scoped_package_name/package.json
npm
.github/workflows/nightly.yml
actions
- SonarSource/unified-dogfooding-actions/run-iris v1 composite
- SonarSource/vault-action-wrapper v3 composite
- actions/checkout 8e8c483db84b4bee98b60c0593521ed34d9990e8 composite
- actions/download-artifact 018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 composite
- actions/upload-artifact 330a01c490aca151604b8cf639adc76d48f6c5d4 composite
- jdx/mise-action 146a28175021df8ca24f8ee1828cc2a60f980bd5 composite
.github/workflows/pr-cleanup.yml
actions
- SonarSource/ci-github-actions/pr_cleanup v1 composite
test/unit/fixtures/fake_project_with_jest_report_file/package.json
npm
.github/workflows/PullRequestClosed.yml
actions
- SonarSource/vault-action-wrapper v3 composite
- sonarsource/gh-action-lt-backlog/PullRequestClosed v2 composite
.github/workflows/RequestReview.yml
actions
- SonarSource/vault-action-wrapper v3 composite
- sonarsource/gh-action-lt-backlog/RequestReview v2 composite
test/integration/fixtures/fake_project_for_integration/package.json
npm
test/unit/fixtures/fake_project_with_package_and_sonar_properties/package.json
npm
.github/workflows/SubmitReview.yml
actions
- SonarSource/vault-action-wrapper v3 composite
- sonarsource/gh-action-lt-backlog/SubmitReview v2 composite
package.json
npm
- @types/adm-zip 0.5.7 development
- @types/fs-extra 11.0.4 development
- @types/jest 30.0.0 development
- @types/node 24.10.1 development
- @types/node-forge 1.3.14 development
- @types/proxy-from-env 1.0.4 development
- @types/semver 7.7.1 development
- @types/sinon 21.0.0 development
- @types/tar-stream 3.1.4 development
- @typescript-eslint/parser 8.48.1 development
- axios-mock-adapter 2.1.0 development
- eslint 9.39.1 development
- eslint-plugin-notice 1.0.0 development
- husky 9.1.7 development
- jest 30.2.0 development
- jest-sonar-reporter 2.0.0 development
- knip 5.72.0 development
- prettier 3.7.4 development
- pretty-quick 4.2.2 development
- replace-in-file 8.3.0 development
- sinon 21.0.0 development
- toml 3.0.0 development
- ts-jest 29.4.6 development
- tsx 4.21.0 development
- typescript 5.9.3 development
- adm-zip 0.5.16
- axios 1.13.2
- commander 13.1.0
- fs-extra 11.3.2
- hpagent 1.2.0
- node-forge 1.3.3
- properties-file 3.6.3
- proxy-from-env 1.1.0
- semver 7.7.3
- slugify 1.6.6
- tar-stream 3.1.7
test/unit/fixtures/fake_project_with_complete_package_file/package.json
npm
- mocha-sonarqube-reporter ^1.0.1 development
test/unit/fixtures/fake_project_with_basic_package_file/package.json
npm
package-lock.json
npm
- 524 dependencies
.github/workflows/PullRequestCreated.yml
actions
- SonarSource/vault-action-wrapper v3 composite
- sonarsource/gh-action-lt-backlog/PullRequestCreated v2 composite
test/unit/fixtures/fake_project_with_nyc_report_file/package.json
npm
test/integration/package.json
npm
- jest 30.2.0 development