Package Health Score

62 / 100

security
Security review needed
popularity
Limited
maintenance
Sustainable
community
Active

Explore Similar Packages

Security

Security review needed

All security vulnerabilities belong to production dependencies of direct and indirect packages.

Security and license risk for significant versions

Version				Vulnerabilities	License Risk
23.27.12	\|	10/2023		0 C 0 H 0 M 0 L	0 H 0 M 0 L
23.27.11	\|	10/2022	Popular	0 C 0 H 0 M 0 L	0 H 0 M 0 L
23.26.1	\|	03/2022		0 C 0 H 0 M 0 L	0 H 0 M 0 L
22.1.5	\|	10/2019		0 C 0 H 0 M 0 L	0 H 0 M 0 L
20.3.15	\|	09/2019		0 C 0 H 0 M 0 L	0 H 0 M 0 L

License

MIT

Security Policy

Is your project affected by vulnerabilities?

Scan your projects for vulnerabilities. Fix quickly with automated fixes. Get started with Snyk for free.

Get started free

Popularity

Limited

Weekly Downloads (691)

GitHub Stars: 200
Forks: 205
Contributors: 170

Direct Usage Popularity

The npm package @momentum-ui/react receives a total of 691 downloads a week. As such, we scored @momentum-ui/react popularity level to be Limited.

Based on project statistics from the GitHub repository for the npm package @momentum-ui/react, we found that it has been starred 200 times.

Downloads are calculated as moving averages for a period of the last 12 months, excluding weekends and known missing data points.

Community

Active

Readme.md: Yes
Contributing.md: Yes
Code of Conduct: No
Contributors: 170
Funding: No

A good and healthy external contribution signal for @momentum-ui/react project, which invites more than one hundred open source maintainers to collaborate on the repository.

We found a way for you to contribute to the project! Looks like @momentum-ui/react is missing a Code of Conduct.

Embed Package Health Score Badge

Maintenance

Sustainable

Commit Frequency

Open Issues: 43
Open PR: 48
Last Release: 1 year ago
Last Commit: 25 days ago

Further analysis of the maintenance status of @momentum-ui/react based on released npm versions cadence, the repository activity, and other data points determined that its maintenance is Sustainable.

An important project maintenance signal to consider for @momentum-ui/react is that it hasn't seen any new versions released to npm in the past 12 months, and could be considered as a discontinued project, or that which receives low attention from its maintainers.

As a healthy sign for on-going project maintenance, we found that the GitHub repository had at least 1 pull request or issue interacted with by the community.

Keep your project healthy

Check your package.json

Ensure all the packages you're using are healthy and well-maintained

Snyk Vulnerability Scanner

Get health score & security insights directly in your IDE

Package

Node.js Compatibility: >=8

Age: 6 years
Dependencies: 12 Direct
Versions: 255
Install Size: 8.96 MB
Dist-tags: 1
# of Files: 1.01K
Maintainers: 23
TS Typings: No

@momentum-ui/react has more than a single and default latest tag published for the npm package. This means, there may be other tags available for this package, such as next to indicate future releases, or stable to indicate stable releases.

Readme

Momentum UI React

npm (scoped)

Momentum UI React is a resuable, component based, flexible React library available as npm module. It provides set of UI components and utilities based on Momentum Design.

The git repo can be cloned from the momentum-ui monorepo and found at https://github.com/momentum-design/momentum-ui/tree/master/react.

Checkout the documentation for documentation and live examples.

Goals

Independent — pick and use only the components you need.
Styled — override styles of components by className and style properties.
Customizable — properties allow many different config options to suit your app.
Performant - high performance guaranteed with use of CSS3 Flexbox and non-bloated architecture.
Reliable — each component is rigorously tested.

Getting Started

To use @momentum-ui/react in your application follow below steps:

Step 1 - Install and add @momentum-ui/react to your npm package dependencies

Using npm

npm i -S @momentum-ui/react

Using yarn

yarn add @momentum-ui/react

Step 2. Import Momentum UI React components in your app

Use ES6 import statement to import the component that you want to use:

import { Button } from '@momentum-ui/react';
// or
import Button from from '@momentum-ui/react/button';
...
...

<div>
  <button size="large" name="primary">Welcome to Momentum UI React !</button>
</div>

Tools & Frameworks

Package manager

yarn - BSD-2-Clause

JsUnit Testing framework

jest - BSD-3-Clause
enzyme - MIT

Contribution

Want to contribute? Why not go through Developer's Guide to understand more technical details about the project and contribution guidelines to be adhered.

Changelog

The changelog can be found here.

Copyright

@momentum-ui/react dependencies

lodash moment react-uid dom-helpers object-assign @babel/runtime @restart/context react-aria-modal react-focus-lock @momentum-ui/core @momentum-ui/icons @momentum-ui/utils

@momentum-ui/react development dependencies

jest yarn chalk react enzyme eslint rimraf cypress opn-cli replace wait-on webpack fs-extra jest-cli coveralls npm-watch react-dom @babel/cli babel-core babel-jest css-loader prop-types url-loader @babel/core file-loader npm-run-all react-redux sass-loader autoprefixer babel-eslint babel-loader browser-sync eslint-watch react-window style-loader @percy/cypress babel-polyfill postcss-loader moment-timezone react-hot-loader react-router-dom webpack-md5-hash @babel/preset-env react-virtualized @babel/preset-react @momentum-ui/tokens eslint-plugin-react html-webpack-plugin regenerator-runtime eslint-plugin-import @babel/preset-stage-0 @hot-loader/react-dom child-process-promise eslint-plugin-cypress eslint-plugin-jsx-a11y postcss-flexbugs-fixes webpack-dev-middleware webpack-hot-middleware enzyme-adapter-react-16 webpack-bundle-analyzer babel-plugin-dev-expression extract-text-webpack-plugin babel-plugin-module-resolver connect-history-api-fallback eslint-import-resolver-alias react-virtualized-auto-sizer @cypress/webpack-preprocessor eslint-import-resolver-webpack @babel/plugin-transform-runtime babel-plugin-add-module-exports @babel/plugin-proposal-class-properties babel-plugin-transform-class-properties @babel/plugin-proposal-optional-chaining @babel/plugin-proposal-export-default-from @babel/plugin-proposal-export-namespace-from @babel/plugin-transform-react-constant-elements

FAQs

What is @momentum-ui/react?

Cisco Momentum UI framework for ReactJs applications. Visit Snyk Advisor to see a full health score report for @momentum-ui/react, including popularity, security, maintenance & community analysis.

Is @momentum-ui/react popular?

The npm package @momentum-ui/react receives a total of 691 weekly downloads. As such, @momentum-ui/react popularity was classified as limited. Visit the popularity section on Snyk Advisor to see the full health analysis.

Is @momentum-ui/react well maintained?

We found indications that @momentum-ui/react maintenance is sustainable demonstrating some project activity. We saw a total of 170 open source contributors collaborating on the project. See the full package health analysis to learn more about the package maintenance status.

Is @momentum-ui/react safe to use?

While scanning the latest version of @momentum-ui/react, we found that a security review is needed. A total of 0 vulnerabilities or license issues were detected. See the full security scan results.

Last updated on 9 November-2024, at 02:32 (UTC).

Build a secure application checklist

Select a recommended open source package

Minimize your risk by selecting secure & well maintained open source packages

DONE

Scan your app for vulnerabilities

Scan your application to find vulnerabilities in your: source code, open source dependencies, containers and configuration files

SCAN NOW

Fix identified vulnerabilities

Easily fix your code by leveraging automatically generated PRs

AUTO FIX

Monitor for new issues

New vulnerabilities are discovered every day. Get notified if your application is affected

MONITOR APP