{"id":31974672,"url":"https://github.com/splitio/javascript-client","last_synced_at":"2025-10-14T20:20:14.643Z","repository":{"id":37880454,"uuid":"47993295","full_name":"splitio/javascript-client","owner":"splitio","description":"NodeJS and Browser SDK client for Split Software","archived":false,"fork":false,"pushed_at":"2025-10-01T15:27:16.000Z","size":28668,"stargazers_count":49,"open_issues_count":10,"forks_count":36,"subscribers_count":17,"default_branch":"main","last_synced_at":"2025-10-01T15:47:52.147Z","etag":null,"topics":["ab-testing","control-rollout","feature-flags","feature-toggles","javascript","split","splitsoftware"],"latest_commit_sha":null,"homepage":"https://split.io","language":"JavaScript","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/splitio.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGES.txt","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2015-12-14T18:26:17.000Z","updated_at":"2025-09-18T17:39:13.000Z","dependencies_parsed_at":"2023-09-28T21:58:51.139Z","dependency_job_id":"e773dd3c-c170-447e-b0ac-572021babc44","html_url":"https://github.com/splitio/javascript-client","commit_stats":{"total_commits":2758,"total_committers":39,"mean_commits":70.71794871794872,"dds":0.6348803480783176,"last_synced_commit":"ad910ea91ae5eb9e8f65307bf120b6bebe26ef71"},"previous_names":[],"tags_count":117,"template":false,"template_full_name":null,"purl":"pkg:github/splitio/javascript-client","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/splitio%2Fjavascript-client","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/splitio%2Fjavascript-client/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/splitio%2Fjavascript-client/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/splitio%2Fjavascript-client/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/splitio","download_url":"https://codeload.github.com/splitio/javascript-client/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/splitio%2Fjavascript-client/sbom","scorecard":{"id":768136,"data":{"date":"2025-08-11","repo":{"name":"github.com/splitio/javascript-client","commit":"0cbe3a9f7cac80115003f2a95af83a4abbb86322"},"scorecard":{"version":"v5.2.1-40-gf6ed084d","commit":"f6ed084d17c9236477efd66e5b258b9d4cc7b389"},"score":5.4,"checks":[{"name":"Maintained","score":10,"reason":"14 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10","details":null,"documentation":{"short":"Determines if the project is \"actively maintained\".","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#maintained"}},{"name":"Packaging","score":-1,"reason":"packaging workflow not detected","details":["Warn: no GitHub/GitLab publishing workflow detected."],"documentation":{"short":"Determines if the project is published as a package that others can easily download, install, easily update, and uninstall.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#packaging"}},{"name":"Dangerous-Workflow","score":10,"reason":"no dangerous workflow patterns detected","details":null,"documentation":{"short":"Determines if the project's GitHub Action workflows avoid dangerous patterns.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#dangerous-workflow"}},{"name":"CII-Best-Practices","score":0,"reason":"no effort to earn an OpenSSF best practices badge detected","details":null,"documentation":{"short":"Determines if the project has an OpenSSF (formerly CII) Best Practices Badge.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#cii-best-practices"}},{"name":"Token-Permissions","score":0,"reason":"detected GitHub workflow tokens with excessive permissions","details":["Info: topLevel 'contents' permission set to 'read': .github/workflows/ci-cd.yml:16","Warn: no topLevel permission defined: .github/workflows/sonar-scan.yml:1","Warn: topLevel 'contents' permission set to 'write': .github/workflows/update-license-year.yml:8","Info: no jobLevel write permissions found"],"documentation":{"short":"Determines if the project's workflows follow the principle of least privilege.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#token-permissions"}},{"name":"Code-Review","score":10,"reason":"all changesets reviewed","details":null,"documentation":{"short":"Determines if the project requires human code review before pull requests (aka merge requests) are merged.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#code-review"}},{"name":"Binary-Artifacts","score":10,"reason":"no binaries found in the repo","details":null,"documentation":{"short":"Determines if the project has generated executable (binary) artifacts in the source repository.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#binary-artifacts"}},{"name":"Pinned-Dependencies","score":2,"reason":"dependency not pinned by hash detected -- score normalized to 2","details":["Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-cd.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/ci-cd.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-cd.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/ci-cd.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-cd.yml:122: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/ci-cd.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci-cd.yml:132: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/ci-cd.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-cd.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/ci-cd.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-cd.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/ci-cd.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci-cd.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/ci-cd.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar-scan.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/sonar-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/sonar-scan.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/sonar-scan.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sonar-scan.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/sonar-scan.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/sonar-scan.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/sonar-scan.yml/main?enable=pin","Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/update-license-year.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/update-license-year.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-license-year.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/update-license-year.yml/main?enable=pin","Warn: third-party GitHubAction not pinned by hash: .github/workflows/update-license-year.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/splitio/javascript-client/update-license-year.yml/main?enable=pin","Info:   0 out of   8 GitHub-owned GitHubAction dependencies pinned","Info:   0 out of   6 third-party GitHubAction dependencies pinned","Info:   2 out of   2 npmCommand dependencies pinned"],"documentation":{"short":"Determines if the project has declared and pinned the dependencies of its build process.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#pinned-dependencies"}},{"name":"Security-Policy","score":0,"reason":"security policy file not detected","details":["Warn: no security policy file detected","Warn: no security file to analyze","Warn: no security file to analyze","Warn: no security file to analyze"],"documentation":{"short":"Determines if the project has published a security policy.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#security-policy"}},{"name":"License","score":9,"reason":"license file detected","details":["Info: project has a license file: LICENSE:0","Warn: project license file does not contain an FSF or OSI license."],"documentation":{"short":"Determines if the project has defined a license.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#license"}},{"name":"Signed-Releases","score":-1,"reason":"no releases found","details":null,"documentation":{"short":"Determines if the project cryptographically signs release artifacts.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#signed-releases"}},{"name":"Fuzzing","score":0,"reason":"project is not fuzzed","details":["Warn: no fuzzer integrations found"],"documentation":{"short":"Determines if the project uses fuzzing.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#fuzzing"}},{"name":"Branch-Protection","score":-1,"reason":"internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration","details":null,"documentation":{"short":"Determines if the default and release branches are protected with GitHub's branch protection settings.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#branch-protection"}},{"name":"SAST","score":0,"reason":"SAST tool is not run on all commits -- score normalized to 0","details":["Warn: 0 commits out of 30 are checked with a SAST tool"],"documentation":{"short":"Determines if the project uses static code analysis.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#sast"}},{"name":"Vulnerabilities","score":5,"reason":"5 existing vulnerabilities detected","details":["Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw","Warn: Project is vulnerable to: GHSA-fjxv-7rqg-78g4","Warn: Project is vulnerable to: GHSA-h7cp-r72f-jxh6","Warn: Project is vulnerable to: GHSA-v62p-rq8g-8h59","Warn: Project is vulnerable to: GHSA-52f5-9888-hmc6"],"documentation":{"short":"Determines if the project has open, known unfixed vulnerabilities.","url":"https://github.com/ossf/scorecard/blob/f6ed084d17c9236477efd66e5b258b9d4cc7b389/docs/checks.md#vulnerabilities"}}]},"last_synced_at":"2025-08-23T01:26:57.573Z","repository_id":37880454,"created_at":"2025-08-23T01:26:57.573Z","updated_at":"2025-08-23T01:26:57.573Z"},"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279021032,"owners_count":26086947,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-14T02:00:06.444Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["ab-testing","control-rollout","feature-flags","feature-toggles","javascript","split","splitsoftware"],"created_at":"2025-10-14T20:20:07.369Z","updated_at":"2025-10-14T20:20:14.633Z","avatar_url":"https://github.com/splitio.png","language":"JavaScript","readme":"# Split SDK for JavaScript\n\n[![npm version](https://badge.fury.io/js/%40splitsoftware%2Fsplitio.svg)](https://badge.fury.io/js/%40splitsoftware%2Fsplitio) [![Build Status](https://github.com/splitio/javascript-client/actions/workflows/ci-cd.yml/badge.svg)](https://github.com/splitio/javascript-client/actions/workflows/ci-cd.yml) [![Greenkeeper badge](https://badges.greenkeeper.io/splitio/javascript-client.svg)](https://greenkeeper.io/)\n\n## Overview\nThis SDK is designed to work with Split, the platform for controlled rollouts, which serves features to your users via feature flags to manage your complete customer experience.\n\n[![Twitter Follow](https://img.shields.io/twitter/follow/splitsoftware.svg?style=social\u0026label=Follow\u0026maxAge=1529000)](https://twitter.com/intent/follow?screen_name=splitsoftware)\n\n## Compatibility\nThe JavaScript SDK is an isomorphic library for both Node.js and Web browser environments.\n\nIt supports **Node.js version 14.x or later**.\n\nFor browsers, the library was build to support ES5 syntax and all major browsers. *However, there are a few polyfills that would be required when targeting old browsers that don't have native support for Promises, Map and Set global objects. You should include polyfills for those, like [es6-promise](https://github.com/stefanpenner/es6-promise) for promises.*\n\n## Getting started\nBelow is a simple Node.js example that describes the instantiation and most basic usage of our SDK:\n```javascript\n// Import the SDK\nvar SplitFactory = require('@splitsoftware/splitio').SplitFactory;\n\n// Instantiate the SDK\nvar factory = SplitFactory({\n  core: {\n    authorizationKey: 'YOUR_SDK_KEY'\n  }\n});\n\n// Get the client instance you'll use\nvar client = factory.client();\n\n// Set a callback to listen for the SDK_READY event, to make sure the SDK is properly loaded before asking for a treatment\nclient.on(client.Event.SDK_READY, function() {\n  var treatment = client.getTreatment('CUSTOMER_ID', 'FEATURE_FLAG_NAME');\n  if (treatment == 'on') {\n    // insert code here for on treatment\n  } else if (treatment == 'off') {\n    // insert code here for off treatment\n  } else {\n    // insert your control treatment code here\n  }\n});\n```\n\nPlease refer to [JavaScript SDK (client-side)](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/client-side-sdks/javascript-sdk/) or [Node.js SDK (server-side)](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/server-side-sdks/nodejs-sdk/) to learn about all the functionality provided by our SDK as well as specifics for each environment and the configuration options available for tailoring it to your current application setup.\n\n## Submitting issues\nThe Split team monitors all issues submitted to this [issue tracker](https://github.com/splitio/javascript-client/issues). We encourage you to use this issue tracker to submit any bug reports, feedback, and feature enhancements. We'll do our best to respond in a timely manner.\n\n## Contributing\nPlease see [Contributors Guide](CONTRIBUTORS-GUIDE.md) to find all you need to submit a Pull Request (PR).\n\n## License\nLicensed under the Apache License, Version 2.0. See: [Apache License](http://www.apache.org/licenses/).\n\n## About Split\n\nSplit is the leading Feature Delivery Platform for engineering teams that want to confidently deploy features as fast as they can develop them. Split’s fine-grained management, real-time monitoring, and data-driven experimentation ensure that new features will improve the customer experience without breaking or degrading performance. Companies like Twilio, Salesforce, GoDaddy and WePay trust Split to power their feature delivery.\n\nTo learn more about Split, contact hello@split.io, or get started with feature flags for free at https://www.split.io/signup.\n\nSplit has built and maintains SDKs for:\n\n\n* .NET [Github](https://github.com/splitio/dotnet-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/server-side-sdks/net-sdk/)\n* Android [Github](https://github.com/splitio/android-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/client-side-sdks/android-sdk/)\n* Angular [Github](https://github.com/splitio/angular-sdk-plugin) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/client-side-sdks/angular-utilities/)\n* Elixir thin-client [Github](https://github.com/splitio/elixir-thin-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/server-side-sdks/elixir-thin-client-sdk/)\n* Flutter [Github](https://github.com/splitio/flutter-sdk-plugin) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/client-side-sdks/flutter-plugin/)\n* GO [Github](https://github.com/splitio/go-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/server-side-sdks/go-sdk/)\n* iOS [Github](https://github.com/splitio/ios-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/client-side-sdks/ios-sdk/)\n* Java [Github](https://github.com/splitio/java-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/server-side-sdks/java-sdk/)\n* JavaScript [Github](https://github.com/splitio/javascript-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/client-side-sdks/javascript-sdk/)\n* JavaScript for Browser [Github](https://github.com/splitio/javascript-browser-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/client-side-sdks/browser-sdk/)\n* Node.js [Github](https://github.com/splitio/javascript-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/server-side-sdks/nodejs-sdk/)\n* PHP [Github](https://github.com/splitio/php-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/server-side-sdks/php-sdk/)\n* PHP thin-client [Github](https://github.com/splitio/php-thin-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/server-side-sdks/php-thin-client-sdk/)\n* Python [Github](https://github.com/splitio/python-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/server-side-sdks/python-sdk/)\n* React [Github](https://github.com/splitio/react-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/client-side-sdks/react-sdk/)\n* React Native [Github](https://github.com/splitio/react-native-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/client-side-sdks/react-native-sdk/)\n* Redux [Github](https://github.com/splitio/redux-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/client-side-sdks/redux-sdk/)\n* Ruby [Github](https://github.com/splitio/ruby-client) [Docs](https://developer.harness.io/docs/feature-management-experimentation/sdks-and-infrastructure/server-side-sdks/ruby-sdk/)\n\nFor a comprehensive list of open source projects visit our [Github page](https://github.com/splitio?utf8=%E2%9C%93\u0026query=%20only%3Apublic%20).\n\n**Learn more about Split:**\n\nVisit [split.io/product](https://www.split.io/product) for an overview of Split, or visit our documentation at [help.split.io](https://help.split.io) for more detailed information.\n","funding_links":[],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsplitio%2Fjavascript-client","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fsplitio%2Fjavascript-client","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fsplitio%2Fjavascript-client/lists"}