@vercel/nestjs
76%
Total Score
healthy
Frequent stable releases and strong project backing outweigh missing declarations and notable workflow hygiene concerns.
Health Score Breakdown
The repository had 26 new issues and 26 new pull requests in the last month, though no pull requests were merged in that period. Activity is present, but the merge data is incomplete or concerning.
The repository name does not match the package name and its README does not mention the package, so package ownership is less transparent than ideal. The organization-backed monorepo context partly explains the mismatch but does not remove the documentation gap.
The package has no type declarations, which is a meaningful integration gap for a NestJS library typically consumed from typed JavaScript or TypeScript projects.
All 24 workflows were analyzed, but one file failed review. The audit reports high-confidence template-injection findings, 75 unpinned action uses out of 156, and trusted-publishing and ad hoc package-install findings; no untrusted checkout or script-injection sink was reported.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @vercel/node Version 23.0.1 | — | — |
@vercel/static-config Version 3.4.4 | — | — |
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 1 year ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.