Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

@sveltejs/kit

Ecosystem:
npm
Package URL:
pkg:npm/@sveltejs/kit
Total PRs:
6,516 Dependabot PRs
Latest PR:
about 7 hours ago
Unique Repositories:
1,113 repositories
Unique Repos (30 days):
105 repositories
Security Advisories
SvelteKit framework has Insufficient CSRF protection for CORS requests
GHSA-gv7g-x59x-wf8f CVE-2023-29008 HIGH published over 2 years ago • updated 24 days ago
### Summary The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` file, containin...
SvelteKit vulnerable to Cross-Site Request Forgery
GHSA-5p75-vc5g-8rv2 CVE-2023-29003 HIGH published over 2 years ago • updated 24 days ago
### Summary The SvelteKit framework offers developers an option to create simple REST APIs. This is done by defining a `+server.js` file, containin...
@sveltejs/kit vulnerable to Cross-site Scripting via tracked search_params
GHSA-6q87-84jw-cjhp CVE-2025-32388 MODERATE published 8 months ago • updated 19 days ago
### Summary Unsanitized search param names cause XSS vulnerability. You are affected if you iterate over all entries of `event.url.searchParams` i...
@sveltejs/kit has unescaped error message included on error page
GHSA-mh2x-fcqh-fmqv CVE-2024-53262 LOW published about 1 year ago • updated 24 days ago
### Summary The static error.html template for errors contains placeholders that are replaced without escaping the content first. ### Details Fr...
@sveltejs/kit vulnerable to XSS on dev mode 404 page
GHSA-rjjv-87mx-6x3h CVE-2024-53261 LOW published about 1 year ago • updated 24 days ago
### Summary "Unsanitized input from *the request URL* flows into `end`, where it is used to render an HTML page returned to the user. This may res...
View all 6 advisories
Recent PRs (filtered by: Major PRs )
RSS Feed Clear filter
Bump devalue, @sveltejs/adapter-auto, @sveltejs/adapter-static, @sveltejs/adapter-vercel and @sveltejs/kit

jolehuit/weazic #1

1.27.2 → 2.37.1 Major PR
Open 3 months ago 1 comment
jolehuit
Bump devalue, @sveltejs/adapter-auto and @sveltejs/kit

akiomik/nosli #94

1.30.4 → 2.37.1 Major PR
Open 3 months ago
akiomik
Bump devalue and @sveltejs/kit

Soloknir/new-year-game #2

1.0.0-next.560 → 2.37.1 Major PR
Open 3 months ago
Soloknir
build(deps-dev): bump @sveltejs/kit from 1.30.4 to 2.37.1

gustavo180591/DocuFlow #10

1.30.4 → 2.37.1 Major PR
Open 3 months ago 2 comments
gustavo180591
Bump the dependencies group in /svelteapp with 19 updates

Hyperclaw79/ht.dev #49

1.30.4 → 2.37.1 Major PR
Open 3 months ago
Hyperclaw79
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.37.1 in /example

vinayakkulkarni/s-offline #2603

1.30.3 → 2.37.1 Major PR
Closed 3 months ago 1 comment
vinayakkulkarni
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.37.1

vinayakkulkarni/s-offline #2598

1.30.3 → 2.37.1 Major PR
Open 3 months ago
vinayakkulkarni
Bump devalue, @sveltejs/adapter-vercel, @sveltejs/adapter-auto and @sveltejs/kit

Afterculture/alchemism-visual #1

1.2.6 → 2.37.0 Major PR
Open 3 months ago 1 comment
Afterculture
Bump devalue, @sveltejs/adapter-auto, @sveltejs/adapter-netlify and @sveltejs/kit

thetillhoff/rahoff.enforge.de #108

1.30.4 → 2.37.0 Major PR
Closed 3 months ago 1 comment
thetillhoff
Bump devalue, @sveltejs/adapter-auto and @sveltejs/kit

pedrozc90/svelte #153

1.30.4 → 2.37.0 Major PR
Merged 3 months ago
pedrozc90
Bump devalue, @sveltejs/adapter-cloudflare, @sveltejs/adapter-auto and @sveltejs/kit

DDuran19/castaway-voters #1

1.27.3 → 2.37.0 Major PR
Open 3 months ago 1 comment
DDuran19
Bump devalue, @sveltejs/adapter-vercel, @sveltejs/adapter-auto and @sveltejs/kit

Hortleur/Poetry #1

1.11.0 → 2.37.0 Major PR
Open 3 months ago
Hortleur
Bump devalue, @sveltejs/adapter-auto and @sveltejs/kit

mit-spatial-action/svelte-map-app #3

1.22.3 → 2.37.0 Major PR
Merged 4 months ago
mit-spatial-action
Bump the npm_and_yarn group across 1 directory with 22 updates

byhemechi/ScoreSaber-Frontend #1

1.0.0-next.405 → 2.37.0 Major PR
Open 4 months ago
byhemechi
Bump the npm_and_yarn group across 1 directory with 13 updates

byhemechi/downgrade-script-generator #1

1.0.0-next.460 → 2.37.0 Major PR
Open 4 months ago 1 comment
byhemechi
Bump the dependencies group in /svelteapp with 19 updates

Hyperclaw79/ht.dev #48

1.30.4 → 2.37.0 Major PR
Closed 4 months ago 1 comment
Hyperclaw79
Bump @sveltejs/kit from 1.30.4 to 2.37.0

khadeem100/thynk-tech #7

1.30.4 → 2.37.0 Major PR
Closed 4 months ago 2 comments
khadeem100
Bump devalue, @sveltejs/adapter-static and @sveltejs/kit in /site

Pyreko/yoisho-clicker #6

1.30.3 → 2.37.0 Major PR
Closed 4 months ago
Pyreko
Bump devalue, @sveltejs/adapter-auto and @sveltejs/kit

mjh316/hackpnwjune #1

1.20.1 → 2.37.0 Major PR
Merged 4 months ago 1 comment
mjh316
build(deps): bump the npm_and_yarn group across 2 directories with 17 updates

dpschen/telefunc #1

1.15.1 → 2.20.6 Major PR
Open 4 months ago
dpschen
Bump devalue, @sveltejs/adapter-auto, @sveltejs/adapter-static and @sveltejs/kit

daaanny90/dannyspina #75

1.30.4 → 2.37.0 Major PR
Open 4 months ago
daaanny90
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.37.0 in /example

vinayakkulkarni/s-offline #2591

1.30.3 → 2.37.0 Major PR
Closed 4 months ago 1 comment
vinayakkulkarni
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.37.0

vinayakkulkarni/s-offline #2590

1.30.3 → 2.37.0 Major PR
Closed 4 months ago 1 comment
vinayakkulkarni
Bump devalue, @sveltejs/adapter-cloudflare and @sveltejs/kit

mootoday/www-mootoday-com #443

1.22.3 → 2.36.3 Major PR
Open 4 months ago
mootoday
Bump devalue, @sveltejs/adapter-auto and @sveltejs/kit

gocs/onboarding #4

1.26.0 → 2.36.3 Major PR
Merged 4 months ago
gocs
Bump devalue, @sveltejs/adapter-auto, @sveltejs/adapter-static and @sveltejs/kit

SL1900/WORKTOOL-PWA #3

1.20.2 → 2.36.3 Major PR
Merged 4 months ago
SL1900
Bump devalue, @sveltejs/adapter-auto and @sveltejs/kit

dplocki/idle-champions-sifter #2

1.22.3 → 2.36.3 Major PR
Merged 4 months ago
dplocki
Bump devalue, @sveltejs/adapter-auto, @sveltejs/adapter-static and @sveltejs/kit

happiestbee/news #2

1.27.1 → 2.36.3 Major PR
Open 4 months ago
happiestbee
Bump devalue, @sveltejs/adapter-auto, @sveltejs/adapter-node and @sveltejs/kit in /app/web

Fersanseg/miralis #1

1.15.10 → 2.36.3 Major PR
Merged 4 months ago
Fersanseg
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.36.3 in /example

vinayakkulkarni/s-offline #2587

1.30.3 → 2.36.3 Major PR
Closed 4 months ago 1 comment
vinayakkulkarni
Bump devalue and @sveltejs/kit

regisfrias/metal-or-medal #2

1.0.0-next.483 → 2.36.3 Major PR
Open 4 months ago
regisfrias
Bump devalue and @sveltejs/kit

regisfrias/timer #9

1.0.0-next.528 → 2.36.3 Major PR
Open 4 months ago
regisfrias
Bump @sveltejs/kit from 1.15.2 to 2.36.2

ondrejsevcik/most-likely-to #8

1.15.2 → 2.36.2 Major PR
Closed 4 months ago 2 comments
ondrejsevcik
Bump devalue, @sveltejs/adapter-auto and @sveltejs/kit

Urpagin/FornoDoroSvelte #1

1.27.7 → 2.36.3 Major PR
Merged 4 months ago
Urpagin
Bump devalue, @sveltejs/adapter-auto and @sveltejs/kit

doctor-spaceman/your-uni #2

1.21.0 → 2.36.3 Major PR
Merged 4 months ago
doctor-spaceman
Bump devalue, @auth/sveltekit, @sveltejs/adapter-auto and @sveltejs/kit

jackthatch/Personal-Website #1

1.20.2 → 2.36.3 Major PR
Open 4 months ago 1 comment
jackthatch
Bump the dependencies group in /svelteapp with 18 updates

Hyperclaw79/ht.dev #47

1.30.4 → 2.36.2 Major PR
Open 4 months ago
Hyperclaw79
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.36.2

vinayakkulkarni/s-offline #2580

1.30.3 → 2.36.2 Major PR
Open 4 months ago
vinayakkulkarni
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.36.2 in /example

vinayakkulkarni/s-offline #2579

1.30.3 → 2.36.2 Major PR
Open 4 months ago
vinayakkulkarni
Bump the dependencies group across 1 directory with 19 updates

Hyperclaw79/ht.dev #33

1.30.4 → 2.36.1 Major PR
Open 4 months ago 3 comments
Hyperclaw79
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.36.1 in /example

vinayakkulkarni/s-offline #2577

1.30.3 → 2.36.1 Major PR
Closed 4 months ago 1 comment
vinayakkulkarni
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.36.1

vinayakkulkarni/s-offline #2576

1.30.3 → 2.36.1 Major PR
Closed 4 months ago 1 comment
vinayakkulkarni
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.36.0 in /example

vinayakkulkarni/s-offline #2575

1.30.3 → 2.36.0 Major PR
Closed 4 months ago 1 comment
vinayakkulkarni
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.36.0

vinayakkulkarni/s-offline #2574

1.30.3 → 2.36.0 Major PR
Closed 4 months ago 1 comment
vinayakkulkarni
chore(deps-ui): bump @sveltejs/kit and @sveltejs/adapter-auto in /ui

ebarped/sego #12

1.30.3 → 2.34.0 Major PR
Open 4 months ago 1 comment
ebarped
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.34.0 in /example

vinayakkulkarni/s-offline #2571

1.30.3 → 2.34.0 Major PR
Open 4 months ago
vinayakkulkarni
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.34.0

vinayakkulkarni/s-offline #2570

1.30.3 → 2.34.0 Major PR
Closed 4 months ago 1 comment
vinayakkulkarni
build(deps-dev): bump @sveltejs/kit from 1.30.4 to 2.20.6

contentauth/verify-site #312

1.30.4 → 2.20.6 Major PR
Open 4 months ago 1 comment
contentauth
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.33.0

vinayakkulkarni/s-offline #2568

1.30.3 → 2.33.0 Major PR
Closed 4 months ago 1 comment
vinayakkulkarni
chore(deps-dev): bump @sveltejs/kit from 1.30.3 to 2.33.0 in /example

vinayakkulkarni/s-offline #2567

1.30.3 → 2.33.0 Major PR
Closed 4 months ago 1 comment
vinayakkulkarni
Package Details
Name: @sveltejs/kit
Ecosystem: npm
PURL Type: npm
Package URL: pkg:npm/@sveltejs/kit
JSON API: View JSON
Security Advisories

6

Active advisories
HIGH 3
MODERATE 1
LOW 2
View All npm Advisories
Package Information
Description:

SvelteKit is the fastest way to build Svelte apps

Repository: https://github.com/sveltejs/kit
Homepage: https://svelte.dev
Latest Release: 2.21.2
7 months ago
Dependent Repos: 17,842
Dependent Packages: 3,630
Downloads: 2,265,474
Ranking: Top 0.2122% by dependent repos Top 0.2722% by downloads Top 0.0325% by dependent pkgs
PR Status
Open 2,739 (42.0%)
Merged 1,424 (21.9%)
Closed 1,850 (28.4%)
PR Types
Minor 4,303 (66.0%)
Major 279 (4.3%)
Patch 1,425 (21.9%)