
Security News
The Hidden Blast Radius of the Axios Compromise
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.
@backstage-community/plugin-cicd-statistics-module-github
Advanced tools
CI/CD Statistics plugin module; Github CICD
This is an extension module to the cicd-statistics plugin, providing a CicdStatisticsApiGithub that you can use to extract the CI/CD statistics from your Github repository.
Install the cicd-statistics and cicd-statistics-module-github plugins in the app package.
Configure your ApiFactory:
CicdStatisticsApiGithub of type CicdDefaults to alter the default CICD UI configuration// packages/app/src/apis.ts
import { configApiRef } from '@backstage/core-plugin-api';
import { scmAuthApiRef } from '@backstage/integration-react';
import { cicdStatisticsApiRef } from '@backstage-community/plugin-cicd-statistics';
import { CicdStatisticsApiGithub } from '@backstage-community/plugin-cicd-statistics-module-github';
export const apis: AnyApiFactory[] = [
createApiFactory({
api: cicdStatisticsApiRef,
deps: {
scmAuthApi: scmAuthApiRef,
configApi: configApiRef,
},
factory: ({ scmAuthApi, configApi }) => {
return new CicdStatisticsApiGithub({ scmAuthApi, configApi });
},
}),
];
// packages/app/src/components/catalog/EntityPage.tsx
import { EntityCicdStatisticsContent } from '@backstage-community/plugin-cicd-statistics';
<EntityLayout.Route path="/ci-cd-statistics" title="CI/CD Statistics">
<EntityCicdStatisticsContent />
</EntityLayout.Route>;
If you're using feature discovery, the plugin should be automatically discovered and enabled. Otherwise, you can manually enable the plugin by adding it to your app:
// packages/app/src/App.tsx
import cicdStatisticsPluginGithubModule from '@backstage-community/plugin-cicd-statistics-module-github/alpha';
const app = createApp({
features: [
// ...
cicdStatisticsPluginGithubModule,
],
});
The following extensions are available in the plugin:
api:cicd-statistics/cicd-statistics-github-apiFAQs
CI/CD Statistics plugin module; Github CICD
The npm package @backstage-community/plugin-cicd-statistics-module-github receives a total of 284 weekly downloads. As such, @backstage-community/plugin-cicd-statistics-module-github popularity was classified as not popular.
We found that @backstage-community/plugin-cicd-statistics-module-github demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The Axios compromise shows how time-dependent dependency resolution makes exposure harder to detect and contain.

Research
A supply chain attack on Axios introduced a malicious dependency, plain-crypto-js@4.2.1, published minutes earlier and absent from the project’s GitHub releases.

Research
Malicious versions of the Telnyx Python SDK on PyPI delivered credential-stealing malware via a multi-stage supply chain attack.