Package Health Score

86 / 100

security
No known security issues
popularity
Recognized
maintenance
Sustainable
community
Active

Explore Similar Packages

Security

No known security issues

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

Version			Vulnerabilities	License Risk
6.0.10	\|	02/2024	0 C 0 H 0 M 0 L	0 H 0 M 0 L
5.0.3	\|	10/2021	0 C 0 H 0 M 0 L	0 H 0 M 0 L
4.0.8	\|	07/2021	0 C 0 H 0 M 0 L	0 H 0 M 0 L
3.1.11	\|	08/2020	0 C 0 H 0 M 0 L	0 H 0 M 0 L
3.0.12	\|	09/2019	0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

MIT

Security Policy

Yes

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Recognized

Weekly Downloads (2,071)

GitHub Stars: 15.14K
Forks: 2.24K
Contributors: 220

Direct Usage Popularity

The npm package @ephox/sand receives a total of 2,071 downloads a week. As such, we scored @ephox/sand popularity level to be Recognized.

Based on project statistics from the GitHub repository for the npm package @ephox/sand, we found that it has been starred 15,143 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Active

Readme.md: Yes
Contributing.md: Yes
Code of Conduct: Yes
Contributors: 220
Funding: No

A good and healthy external contribution signal for @ephox/sand project, which invites more than one hundred open source maintainers to collaborate on the repository.

Embed Package Health Score Badge

Maintenance

Sustainable

Commit Frequency

Open Issues: 512
Open PR: 32
Last Release: 11 months ago
Last Commit: 15 days ago

Further analysis of the maintenance status of @ephox/sand based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Sustainable.

We found that @ephox/sand demonstrates a positive version release cadence with at least one new version released in the past 12 months.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: not defined

Age: 8 years
Dependencies: 1 Direct
Versions: 64
Install Size: 127 kB
Dist-tags: 2
# of Files: 106
Maintainers: 2
TS Typings: No

@ephox/sand has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Readme

Description

sand is a library for handling platform detection and standardising native browser functions. It does not bundle any commands. It is only a collection of modules.

Installation

sand is available as an npm package. You can install it via the npm package @ephox/sand

Install from npm

npm install @ephox/sand.

Using the API

The project sand has two purposes: platform detection and global wrappers.

Platform Detection

In order to detect the current platform, execute PlatformDetection.detect(). This will return an object with three parts: browser, os, and device.

var platform = PlatformDetection.detect();
console.log('browser', platform.browser);
console.log('os', platform.os);
console.log('device', platform.device);

Note, PlatformQuery has been introduced to provide convenience methods for common platform queries and manage the internal structure of detect's response itself.

Browser

The browser field has the following information:

current: the name of the browser as a string
version: a (major, minor) tuple representing the version
isEdge: returns true iff. the browser is Microsoft Edge
isChromium: returns true iff. the browser is Chromium Based
isIE: returns true iff. the browser is Internet Explorer
isOpera: returns true iff. the browser is Opera
isFirefox: returns true iff. the browser is Firefox
isSafari: returns true iff. the browser is Safari

var platform = PlatformDetection.detect();
var isFF = platform.browser.isFirefox();

Operating System (OS)

The os field has the following information:

current: the name of the OS as a string
version: a (major, minor) tuple representing the version
isWindows: returns true iff. the OS is Windows
isiOS: returns true iff. the OS is iOS
isAndroid: returns true iff. the OS is Android
isOSX: returns true iff. the OS is OSX
isLinux: returns true iff. the OS is Linux
isSolaris: returns true iff. the OS is Solaris
isFreeBSD: returns true iff. the OS is FreeBSD

var platform = PlatformDetection.detect();
var isWin = platform.os.isWindows();

Device

The device field has the following information:

isiPad: returns true iff. the device is an iPad
isiPhone: returns true iff. the device is an iPhone
isTablet: returns true iff. the device is an Tablet
isPhone: returns true iff. the device is an Phone
isTouch: returns true iff. the device is an Touch
isAndroid: returns true iff. the device is an Android
isiOS: returns true iff. the device is an iOS
isWebView: returns true iff. the device is an WebView

var platform = PlatformDetection.detect();
var isPh = platform.device.isPhone();

Global Wrappers

These wrappers allow dependencies on globals that only exist on newer browsers, where normal references to them would cause the script to fail to load. They don't provide any safety in accessing the globals; it is assumed the supporting code knows whether the current browser supports the global. They are simply a way to defer referencing it.

HTMLElement.isPrototypeOf(x)

JSON

https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/JSON

JSON.parse(obj)
JSON.stringify(obj, replacer, space)

NodeFilter

https://developer.mozilla.org/en-US/docs/Web/API/NodeFilter

URL

https://developer.mozilla.org/en-US/docs/Web/API/URL.createObjectURL

URL.createObjectURL(blob)
URL.removeObjectURL(u)

Uint8Array

https://developer.mozilla.org/en-US/docs/Web/API/Uint8Array

Window

https://developer.mozilla.org/en/docs/Web/API/window.requestAnimationFrame

Window.requestAnimationFrame(callback)
Window.atob(base64)

XMLHttpRequest

https://developer.mozilla.org/en/docs/XMLHttpRequest

XMLSerializer

https://developer.mozilla.org/en/docs/XMLSerializer

XMLSerializer.serializeToString(node)

Running Tests

$ yarn test

@ephox/sand dependencies

@ephox/katamari

FAQs

What is @ephox/sand?

Platform detection library. Visit Snyk Advisor to see a full health score report for @ephox/sand, including popularity, security, maintenance & community analysis.

Is @ephox/sand popular?

The npm package @ephox/sand receives a total of 2,071 weekly downloads. As such, @ephox/sand popularity was classified as a recognized. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is @ephox/sand well maintained?

We found indications that @ephox/sand maintenance is sustainable demonstrating some project activity. We saw a total of 220 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is @ephox/sand safe to use?

The npm package @ephox/sand was scanned for known vulnerabilities and missing license, and no issues were found. Thus the package was deemed as safe to use. See the full health analysis review.

Last updated on 12 December-2024, at 04:30 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP