@nestjs/core
Nest - modern, fast, powerful node.js web framework (@core)
94%
Total Score
healthy
Frequent releases and substantial, current repository activity indicate a well-maintained package.
Health Score Breakdown
No build attestation or trusted-publisher identity was recorded, leaving publication provenance less transparent despite the package's otherwise strong maintenance evidence.
Both workflows were analyzed successfully, use read-only permissions, and contain no reported audit findings or untrusted checkouts. However, all 4 analyzed action references are unpinned, which is a supply-chain hygiene weakness.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2026-35515 @nestjs/core is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 0.0.0 - 11.1.17. | 0.0.0 - 11.1.17 | Medium |
CVE-2023-26108 @nestjs/core is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.0 - 9.0.5. | 0.0.0 - 9.0.5 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 uid Version 2.0.2 | — | — |
tslib Version 2.8.1 | — | — |
iterare Version 1.2.1 | — | — |
path-to-regexp Version 8.4.2 | — | — |
fast-safe-stringify Version 2.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 hours ago
- Created
- 9 years ago
- Unpacked Size
- 0.7 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.