@nx/docker
The Nx Plugin for Docker to aid in containerizing projects.
84%
Total Score
healthy
Active Nx maintenance and verified publishing outweigh repository-naming and workflow hygiene concerns.
Health Score Breakdown
The repository name does not match @nx/docker and its README does not mention the exact package, which creates some ambiguity about package-to-repository mapping; the monorepo context partly explains the mismatch.
All 13 workflows were analyzed with no untrusted checkouts or script-injection paths and all 81 action references pinned. High-confidence template-injection findings and adhoc package installs remain workflow hygiene concerns.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-480709 @nx/docker is vulnerable to OS Command Injection in versions 21.4.0 - 22.7.7 and 23.0.0 - 23.1.0. | 21.4.0 - 22.7.723.0.0 - 23.1.0 | High |
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.3.0 | — | — |
@nx/devkit Version 23.3.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 1 year ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.