{"id":1696238,"name":"expr-eval","ecosystem":"npm","description":"Mathematical expression evaluator","homepage":"https://github.com/silentmatt/expr-eval#readme","licenses":"MIT","normalized_licenses":["MIT"],"repository_url":"https://github.com/silentmatt/expr-eval","keywords_array":["expression","math","evaluate","eval","function","parser"],"namespace":null,"versions_count":17,"first_release_published_at":"2016-09-14T03:34:04.382Z","latest_release_published_at":"2019-09-28T21:26:16.055Z","latest_release_number":"2.0.2","last_synced_at":"2026-04-16T20:12:40.132Z","created_at":"2022-04-09T15:17:51.389Z","updated_at":"2026-04-17T02:12:03.511Z","registry_url":"https://www.npmjs.com/package/expr-eval","install_command":"npm install expr-eval","documentation_url":null,"metadata":{"funding":null,"dist-tags":{"latest":"2.0.2"}},"repo_metadata":{"id":601901,"uuid":"237964","full_name":"silentmatt/expr-eval","owner":"silentmatt","description":"Mathematical expression evaluator in JavaScript","archived":false,"fork":false,"pushed_at":"2024-08-15T05:00:37.000Z","size":486,"stargazers_count":1332,"open_issues_count":68,"forks_count":265,"subscribers_count":29,"default_branch":"master","last_synced_at":"2026-04-13T19:25:14.182Z","etag":null,"topics":["hacktoberfest","javascript","math","mathematical-expressions","parser"],"latest_commit_sha":null,"homepage":"http://silentmatt.com/javascript-expression-evaluator/","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/silentmatt.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE.txt","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2009-06-28T02:13:39.000Z","updated_at":"2026-04-10T19:09:26.000Z","dependencies_parsed_at":"2024-09-30T16:20:49.821Z","dependency_job_id":"89f31961-b144-4f13-9ccb-e7b912548de9","html_url":"https://github.com/silentmatt/expr-eval","commit_stats":{"total_commits":295,"total_committers":35,"mean_commits":8.428571428571429,"dds":0.3525423728813559,"last_synced_commit":"6e889e0e75c50ac37d70c35388602025650e0c50"},"previous_names":["silentmatt/js-expression-eval"],"tags_count":19,"template":false,"template_full_name":null,"purl":"pkg:github/silentmatt/expr-eval","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/silentmatt","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/sbom","scorecard":{"id":823610,"data":{"date":"2025-08-11","repo":{"name":"github.com/silentmatt/expr-eval","commit":"6e889e0e75c50ac37d70c35388602025650e0c50"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":3.3,"checks":[{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Code-Review","score":2,"reason":"Found 5/24 approved changesets -- score normalized to 2","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Token-Permissions","score":-1,"reason":"No tokens found","details":null,"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Dangerous-Workflow","score":-1,"reason":"no workflows found","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Maintained","score":0,"reason":"0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Pinned-Dependencies","score":-1,"reason":"no dependencies found","details":null,"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"Vulnerabilities","score":10,"reason":"0 existing vulnerabilities detected","details":null,"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE.txt:0","Info: FSF or OSI recognized license: MIT License: LICENSE.txt:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 11 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}}]},"last_synced_at":"2025-08-23T16:11:00.415Z","repository_id":601901,"created_at":"2025-08-23T16:11:00.415Z","updated_at":"2025-08-23T16:11:00.415Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":31902366,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-04-16T18:22:33.417Z","status":"ssl_error","status_checked_at":"2026-04-16T18:21:47.142Z","response_time":69,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.6:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"},"owner_record":{"login":"silentmatt","name":"Matthew Crumley","uuid":"21796","kind":"user","description":"","email":"","website":"https://silentmatt.com/","location":"St. Petersburg, FL","twitter":null,"company":null,"icon_url":"https://avatars.githubusercontent.com/u/21796?v=4","repositories_count":41,"last_synced_at":"2023-04-11T19:40:51.493Z","metadata":{"has_sponsors_listing":false},"html_url":"https://github.com/silentmatt","funding_links":[],"total_stars":null,"followers":null,"following":null,"created_at":"2022-11-02T17:16:13.138Z","updated_at":"2023-04-11T19:40:51.859Z","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/silentmatt","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/silentmatt/repositories"},"tags":[{"name":"v2.0.2","sha":"9f40d2b0367f551bd2c07a6c7d2e06d8943cd7c3","kind":"commit","published_at":"2019-09-28T21:24:26.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v2.0.2","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v2.0.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v2.0.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v2.0.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v2.0.2/manifests"},{"name":"v2.0.1","sha":"54fb6de0f0ac17a3cbedf3bdb12679283602cbcb","kind":"commit","published_at":"2019-09-10T19:07:37.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v2.0.1","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v2.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v2.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v2.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v2.0.1/manifests"},{"name":"v2.0.0","sha":"32b7f9f2e9bb4f5dd551fbbb1a08cd2c84b39632","kind":"commit","published_at":"2019-09-08T02:52:45.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v2.0.0","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v2.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v2.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v2.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v2.0.0/manifests"},{"name":"v1.2.3","sha":"49a85eb189ff1e08f944486c4859aebc70edc201","kind":"commit","published_at":"2019-07-10T13:52:13.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.2.3","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.2.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.2.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.2.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.2.3/manifests"},{"name":"v1.2.2","sha":"877025c699df426e7c55da2bd822288fc1e9222c","kind":"commit","published_at":"2018-07-03T14:53:04.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.2.2","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.2.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.2.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.2.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.2.2/manifests"},{"name":"v1.2.1","sha":"ffecd28c13fb9e3e502f1d07fbfbb5f85acd1d5b","kind":"commit","published_at":"2017-12-21T21:41:01.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.2.1","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.2.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.2.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.2.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.2.1/manifests"},{"name":"v1.2.0","sha":"03668c29e983da1807f35e2152656b2dd809746a","kind":"commit","published_at":"2017-09-25T18:32:15.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.2.0","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.2.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.2.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.2.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.2.0/manifests"},{"name":"v1.1.1","sha":"d7f8884c1ae81f39b4b73cbbd3f27aed8d305a23","kind":"commit","published_at":"2017-09-06T17:42:33.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.1.1","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.1.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.1.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.1.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.1.1/manifests"},{"name":"v1.1.0","sha":"3c3fe07bfe33e371a259626ce8366b4e22a61f38","kind":"commit","published_at":"2017-08-30T01:57:52.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.1.0","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.1.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.1.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.1.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.1.0/manifests"},{"name":"v1.0.1","sha":"b7d35ecebe8fe134d40dc07bed4805578985dcac","kind":"commit","published_at":"2017-06-10T22:56:35.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.0.1","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.0.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.0.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.1/manifests"},{"name":"v1.0.0","sha":"fb3b840b409e3db6f7e9335a6431a1338a1fca5e","kind":"commit","published_at":"2017-01-02T19:48:17.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.0.0","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.0.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.0.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.0/manifests"},{"name":"v1.0.0-rc.4","sha":"0e26a8c708580d7a157353e8c778168095d3b73c","kind":"commit","published_at":"2016-12-29T18:17:47.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.0.0-rc.4","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.0.0-rc.4","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.0.0-rc.4","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.0-rc.4","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.0-rc.4/manifests"},{"name":"v1.0.0-rc.3","sha":"513c2cadf650c81ca41f49124a0dfea7f71b77e6","kind":"commit","published_at":"2016-11-28T20:35:25.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.0.0-rc.3","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.0.0-rc.3","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.0.0-rc.3","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.0-rc.3","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.0-rc.3/manifests"},{"name":"v1.0.0-rc.2","sha":"ea307ea5ad26ad3417c49a56c78e90e10b36aa00","kind":"commit","published_at":"2016-11-28T20:06:23.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.0.0-rc.2","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.0.0-rc.2","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.0.0-rc.2","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.0-rc.2","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.0-rc.2/manifests"},{"name":"v1.0.0-rc.1","sha":"9d75c5ddba33cd74ce8aa9969ba84212d4075e1b","kind":"commit","published_at":"2016-11-28T19:26:01.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v1.0.0-rc.1","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v1.0.0-rc.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v1.0.0-rc.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.0-rc.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v1.0.0-rc.1/manifests"},{"name":"v0.12.0","sha":"92ed7405cae44a1cf839ee9437a3444c818d91b6","kind":"tag","published_at":"2016-10-13T05:41:26.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v0.12.0","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v0.12.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v0.12.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v0.12.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v0.12.0/manifests"},{"name":"v0.11.0","sha":"e3a44b2017f915030dfd66e903719bcc66deb2de","kind":"tag","published_at":"2016-10-09T22:28:34.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v0.11.0","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v0.11.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v0.11.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v0.11.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v0.11.0/manifests"},{"name":"v0.10.1","sha":"7297a56fd2b1e49df8a5bd1492b982648b8f7b19","kind":"tag","published_at":"2016-10-02T21:22:22.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v0.10.1","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v0.10.1","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v0.10.1","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v0.10.1","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v0.10.1/manifests"},{"name":"v0.10.0","sha":"416853f3fd8be5419bf1ecdaffbd6633d40576a8","kind":"tag","published_at":"2016-09-29T04:49:23.000Z","download_url":"https://codeload.github.com/silentmatt/expr-eval/tar.gz/v0.10.0","html_url":"https://github.com/silentmatt/expr-eval/releases/tag/v0.10.0","dependencies_parsed_at":null,"dependency_job_id":null,"purl":"pkg:github/silentmatt/expr-eval@v0.10.0","tag_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v0.10.0","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/tags/v0.10.0/manifests"}]},"repo_metadata_updated_at":"2026-04-16T20:13:25.122Z","dependent_packages_count":186,"downloads":2869176,"downloads_period":"last-month","dependent_repos_count":2783,"rankings":{"downloads":0.30450528164511587,"dependent_repos_count":0.43297234581341754,"dependent_packages_count":0.2640857718402382,"stargazers_count":2.3931471632607018,"forks_count":2.198029277741932,"docker_downloads_count":1.1149994035822433,"average":1.1179565406472747},"purl":"pkg:npm/expr-eval","advisories":[{"uuid":"GSA_kwCzR0hTQS04Z3czLXJ4aDQtdjZqeM4ABOjV","url":"https://github.com/advisories/GHSA-8gw3-rxh4-v6jx","title":"expr-eval vulnerable to Prototype Pollution","description":"npm package `expr-eval` is vulnerable to Prototype Pollution. An attacker with access to express eval interface can use JavaScript prototype-based inheritance model to achieve arbitrary code execution. The npm expr-eval-fork package resolves this issue.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-11-14T18:31:39.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":7.3,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-13204","https://github.com/jorenbroekema/expr-eval","https://github.com/silentmatt/expr-eval","https://www.npmjs.com/package/expr-eval-fork","https://github.com/silentmatt/expr-eval/pull/252/files","https://github.com/SECCON/SECCON2022_final_CTF/blob/main/jeopardy/web/babybox/solver/solver.py","https://github.com/vladko312/extras/blob/f549d505af300fd74a01b46fab2102990ff1c14d/expr-eval.py","https://www.huntr.dev/bounties/1-npm-expr-eval","https://github.com/jorenbroekema/expr-eval/commit/6c475a118643ae0efe012de283e932fb8b74324b","https://github.com/silentmatt/expr-eval/commit/6e889e0e75c50ac37d70c35388602025650e0c50","https://github.com/advisories/GHSA-8gw3-rxh4-v6jx"],"source_kind":"github","identifiers":["GHSA-8gw3-rxh4-v6jx","CVE-2025-13204"],"repository_url":null,"blast_radius":0.0,"created_at":"2025-11-17T19:00:08.870Z","updated_at":"2026-04-17T02:02:01.413Z","epss_percentage":0.00036,"epss_percentile":0.10741,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04Z3czLXJ4aDQtdjZqeM4ABOjV","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS04Z3czLXJ4aDQtdjZqeM4ABOjV","packages":[{"ecosystem":"npm","package_name":"expr-eval-fork","versions":[{"first_patched_version":"2.0.2","vulnerable_version_range":"\u003c 2.0.2"}],"purl":"pkg:npm/expr-eval-fork"},{"ecosystem":"npm","package_name":"expr-eval","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 2.0.2"}],"purl":"pkg:npm/expr-eval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS04Z3czLXJ4aDQtdjZqeM4ABOjV/related_packages","related_advisories":[]},{"uuid":"GSA_kwCzR0hTQS1qYzg1LWZwd2YtcW03eM4ABONh","url":"https://github.com/advisories/GHSA-jc85-fpwf-qm7x","title":"expr-eval does not restrict functions passed to the evaluate function","description":"The expr-eval library is a JavaScript expression parser and evaluator designed to safely evaluate mathematical expressions with user-defined variables. However, due to insufficient input validation, an attacker can pass a crafted variables object into the evaluate() function and trigger arbitrary code execution.","origin":"UNSPECIFIED","severity":"HIGH","published_at":"2025-11-05T03:30:23.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":8.6,"cvss_vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2025-12735","https://github.com/silentmatt/expr-eval/pull/288","https://github.com/jorenbroekema/expr-eval","https://github.com/silentmatt/expr-eval","https://www.npmjs.com/package/expr-eval","https://www.npmjs.com/package/expr-eval-fork","https://github.com/jorenbroekema/expr-eval/commit/1d71bb2ca8f98df8de00e9cc4de8fdd468a7ad43","https://github.com/jorenbroekema/expr-eval/blob/460b820ba01c5aca6c5d84a7d4f1fa5d1913c67b/test/security.js","https://www.kb.cert.org/vuls/id/263614","https://kb.cert.org/vuls/id/263614","https://github.com/silentmatt/expr-eval/pull/289","https://github.com/advisories/GHSA-jc85-fpwf-qm7x"],"source_kind":"github","identifiers":["GHSA-jc85-fpwf-qm7x","CVE-2025-12735"],"repository_url":"https://github.com/silentmatt/expr-eval","blast_radius":29.62281357447277,"created_at":"2025-11-05T19:00:14.558Z","updated_at":"2026-04-17T02:02:07.148Z","epss_percentage":0.00101,"epss_percentile":0.27795,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qYzg1LWZwd2YtcW03eM4ABONh","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1qYzg1LWZwd2YtcW03eM4ABONh","packages":[{"ecosystem":"npm","package_name":"expr-eval","versions":[{"first_patched_version":null,"vulnerable_version_range":"\u003c= 2.0.2"}],"purl":"pkg:npm/expr-eval"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qYzg1LWZwd2YtcW03eM4ABONh/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/npm/expr-eval","docker_dependents_count":90,"docker_downloads_count":150557622,"usage_url":"https://repos.ecosyste.ms/usage/npm/expr-eval","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/npm/expr-eval/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":{"last_synced_at":"2026-04-13T19:12:13.866Z","issues_count":70,"pull_requests_count":45,"avg_time_to_close_issue":15042240.666666666,"avg_time_to_close_pull_request":12232370.235294119,"issues_closed_count":24,"pull_requests_closed_count":34,"pull_request_authors_count":24,"issue_authors_count":55,"avg_comments_per_issue":2.142857142857143,"avg_comments_per_pull_request":4.133333333333333,"merged_pull_requests_count":13,"bot_issues_count":3,"bot_pull_requests_count":12,"past_year_issues_count":5,"past_year_pull_requests_count":3,"past_year_avg_time_to_close_issue":null,"past_year_avg_time_to_close_pull_request":null,"past_year_issues_closed_count":0,"past_year_pull_requests_closed_count":0,"past_year_pull_request_authors_count":3,"past_year_issue_authors_count":5,"past_year_avg_comments_per_issue":2.8,"past_year_avg_comments_per_pull_request":5.666666666666667,"past_year_bot_issues_count":0,"past_year_bot_pull_requests_count":0,"past_year_merged_pull_requests_count":0,"issues_url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/repositories/silentmatt%2Fexpr-eval/issues","maintainers":[{"login":"silentmatt","count":11,"url":"https://issues.ecosyste.ms/api/v1/hosts/GitHub/authors/silentmatt"}],"active_maintainers":[]},"versions_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expr-eval/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expr-eval/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expr-eval/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expr-eval/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/packages/expr-eval/codemeta","maintainers":[{"uuid":"silentmatt","login":"silentmatt","name":null,"email":"email@matthewcrumley.com","url":null,"packages_count":2,"html_url":"https://www.npmjs.com/~silentmatt","role":null,"created_at":"2022-11-12T07:21:03.139Z","updated_at":"2022-11-12T07:21:03.139Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/npmjs.org/maintainers/silentmatt/packages"}]}