@nestjs/schedule

Build provenancecaution

No build attestation, trusted publisher identity, or staged publishing is present. This is a transparency gap for verifying how the published artifact was produced.

Repo toolingcaution

The repository uses TypeScript, Vitest, npm scripts, and Vite for build and test work. It has no security-scanning tools, leaving a modest security-hygiene gap.

Security policycaution

The repository has no published security policy. That reduces transparency about vulnerability reporting and response, though active maintenance and project backing partly offset the gap.