{"id":13683213,"url":"https://github.com/smogon/pokemon-showdown-client","last_synced_at":"2025-12-16T15:00:51.786Z","repository":{"id":6545313,"uuid":"7786818","full_name":"smogon/pokemon-showdown-client","owner":"smogon","description":"The client for Pokémon Showdown","archived":false,"fork":false,"pushed_at":"2025-12-07T08:02:54.000Z","size":56199,"stargazers_count":640,"open_issues_count":151,"forks_count":959,"subscribers_count":46,"default_branch":"master","last_synced_at":"2025-12-12T05:43:46.956Z","etag":null,"topics":["hacktoberfest"],"latest_commit_sha":null,"homepage":"http://pokemonshowdown.com","language":"TypeScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/smogon.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":"CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2013-01-24T00:09:53.000Z","updated_at":"2025-12-08T15:36:28.000Z","dependencies_parsed_at":"2024-01-05T20:40:29.683Z","dependency_job_id":"07dcf29b-e642-43e8-ba26-0a0b427e4720","html_url":"https://github.com/smogon/pokemon-showdown-client","commit_stats":{"total_commits":5221,"total_committers":168,"mean_commits":"31.077380952380953","dds":0.5724956904807508,"last_synced_commit":"4e52d45423a7b319468d3b43800500a86cb66412"},"previous_names":["zarel/pokemon-showdown-client"],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/smogon/pokemon-showdown-client","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smogon%2Fpokemon-showdown-client","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smogon%2Fpokemon-showdown-client/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smogon%2Fpokemon-showdown-client/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smogon%2Fpokemon-showdown-client/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/smogon","download_url":"https://codeload.github.com/smogon/pokemon-showdown-client/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/smogon%2Fpokemon-showdown-client/sbom","scorecard":{"id":406311,"data":{"date":"2025-08-11","repo":{"name":"github.com/smogon/pokemon-showdown-client","commit":"90d92db507b7ee28190c396ffcb7e65b659f211c"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":4,"checks":[{"name":"Maintained","score":10,"reason":"30 commit(s) and 9 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Code-Review","score":5,"reason":"Found 15/30 approved changesets -- score normalized to 5","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Warn: no topLevel permission defined: .github/workflows/test.yml:1","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Binary-Artifacts","score":9,"reason":"binaries present in source code","details":["Warn: binary detected: play.pokemonshowdown.com/showdown.crx:1"],"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":10,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Info: FSF or OSI recognized license: GNU Affero General Public License v3.0: LICENSE:0"],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Branch-Protection","score":0,"reason":"branch protection not enabled on development/release branches","details":["Warn: branch protection not enabled for branch 'master'"],"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"Pinned-Dependencies","score":3,"reason":"dependency not pinned by hash detected -- score normalized to 3","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/smogon/pokemon-showdown-client/test.yml/master?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:24: update your workflow using https://app.stepsecurity.io/secureworkflow/smogon/pokemon-showdown-client/test.yml/master?enable=pin","Info:   0 out of   2 GitHub-owned GitHubAction dependencies pinned","Info:   1 out of   1 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 15 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":0,"reason":"13 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8","Warn: Project is vulnerable to: GHSA-xffm-g5w8-qvg7","Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c","Warn: Project is vulnerable to: GHSA-2j2x-2gpw-g8fm","Warn: Project is vulnerable to: GHSA-wgfq-7857-4jcc","Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3","Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5","Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp","Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq","Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr","Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765","Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-18T21:21:27.366Z","repository_id":6545313,"created_at":"2025-08-18T21:21:27.366Z","updated_at":"2025-08-18T21:21:27.366Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":27766782,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-12-16T02:00:10.477Z","response_time":57,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["hacktoberfest"],"created_at":"2024-08-02T13:02:04.209Z","updated_at":"2025-12-16T15:00:51.772Z","avatar_url":"https://github.com/smogon.png","language":"TypeScript","funding_links":[],"categories":["PHP"],"sub_categories":[],"readme":"Pokémon Showdown Client\n========================================================================\n\nNavigation: [Website][1] | [Server repository][2] | **Client repository** | [Dex repository][3]\n\n  [1]: http://pokemonshowdown.com/\n  [2]: https://github.com/Zarel/Pokemon-Showdown\n  [3]: https://github.com/Zarel/Pokemon-Showdown-Dex\n\nIntroduction\n------------------------------------------------------------------------\n\nThis is a repository for most of the client code for Pokémon Showdown.\n\nThis is what runs `play.pokemonshowdown.com`.\n\n**WARNING: You probably want the [Pokémon Showdown server][4]**, if you're\nsetting up a server.\n\n  [4]: https://github.com/Zarel/Pokemon-Showdown\n\nBrowser support\n------------------------------------------------------------------------\n\nPokémon Showdown currently supports, in order of preference:\n\n - Chrome\n - Chromium browsers (Edge, Vivaldi, Brave, Opera...)\n - Firefox\n - Safari 5+\n - IE11+ and Edge\n - Chrome/Firefox/Safari for various mobile devices\n - any remotely modern browser\n\nPokémon Showdown is usable, but expect degraded performance and certain features not to work in extremely legacy browsers like:\n\n - Safari 4\n - IE9-10\n\nPokémon Showdown is mostly developed on Chrome, and Chrome or the desktop client is required for certain features like dragging-and-dropping teams from PS to your computer. However, bugs reported on any supported browser will usually be fixed pretty quickly.\n\nNew client\n------------------------------------------------------------------------\n\nDevelopment is proceeding on the client rewrite! The live version is\navailable at https://play.pokemonshowdown.com/beta\n\nYou can contribute to it yourself using the same process as before, just\nuse `testclient-beta.html` rather than `testclient.html`.\n\nTesting (the old client)\n------------------------------------------------------------------------\n\nClient testing requires a build step! Install the latest Node.js (we\nrequire v20 or later) and Git, and run `node build` (on Windows) or `./build`\n(on other OSes) to build.\n\nYou can make and test client changes simply by building after each change,\nand opening `play.pokemonshowdown.com/testclient.html`. This will allow you\nto test changes to the client without setting up your own login server.\n\n### Test keys\n\nFor security reasons, browsers [don't let other websites control PS][5], so\nthey can't screw with your account, but it does make it harder to log in on\nthe test client.\n\nThe default hack makes you copy/paste the data instead, but if you're\nrefreshing a lot, just add a `config/testclient-key.js` file, with the\ncontents:\n\n    const POKEMON_SHOWDOWN_TESTCLIENT_KEY = 'sid';\n\nReplace `sid` with the contents of your actual PS `sid` cookie. You can quickly\ngrab it from:\n\n\u003e https://play.pokemonshowdown.com/testclient-key.php\n\nMake sure to put it in `config/` and not `play.pokemonshowdown.com/config/`.\n\n(This is the only supported method of logging in on the beta testclient.)\n\n  [5]: https://developer.mozilla.org/en-US/docs/Web/HTTP/CORS\n\n### Other servers\n\nYou can connect to an arbitrary server by navigating to\n`testclient.html?~~host:port`. For example, to connect to a server running\nlocally on port 8000, you can navigate to `testclient.html?~~localhost:8000`.\n\n**NOTE**: Certain browsers will convert `'?'` to `'%3F'` when reading files off\nof the local filesystem. As a workaround, try using a different browser or\nserving the files locally first (ie. run `npx http-server` from the\ndirectory this README is in, then navigate in your browser to\n`http://localhost:8080/testclient.html?~~localhost:8000`).\n\n### Limitations\n\nEven with a test key, the following things will fail in `testclient.html`:\n\n+ Registering\n+ Logging into other accounts (you can still switch to other unregistered\n  accounts and back, though)\n\nEverything else can be tested.\n\nWarning\n------------------------------------------------------------------------\n\nThis repository is not \"batteries included\". It does NOT include instructions\nto run a full Pokémon Showdown login server, and we will not provide them.\nPlease do not ask for help on this; you will be turned away.\n\nIf you make a mistake hosting a login server, your users' passwords can get\nstolen, so we do not want anyone to host a login server unless they can\nfigure out how to do it without help.\n\nIt also doesn't include several resource files (namely, the `/audio/` and\n`/sprites/` directories) for size reasons.\n\nOn the other hand, as long as you don't want to run your own login server,\nthis repository contains everything you need to test changes to the client;\njust see the \"Testing\" section above.\n\nLicense\n------------------------------------------------------------------------\n\nPokémon Showdown's client is distributed under the terms of the [AGPLv3][6].\n\nThe reason is mostly because I don't want low-effort proprietary forks that add bad code that steals everyone's passwords, or something like that.\n\nIf you're doing _anything_ else other than forking, _especially_ if you want to some client code files in your own open-source project that you want to release under a more permissive license (like, if you want to make your own multiplayer open-source game client for a different game), please ask at `staff@pokemonshowdown.com`. I hold all the copyright to the AGPLv3 parts and can relicense them to MIT for you.\n\n  [6]: http://www.gnu.org/licenses/agpl-3.0.html\n\n**WARNING:** This is **NOT** the same license as Pokémon Showdown's server.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsmogon%2Fpokemon-showdown-client","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsmogon%2Fpokemon-showdown-client","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsmogon%2Fpokemon-showdown-client/lists"}