Decorator-based property validation for classes.
68%
Total Score
63
100
95
70
50
The repository recorded zero commits and zero active maintainers during the last three months. This is the strongest concern because it suggests current maintenance has paused despite the recent package release.
No build attestation, trusted publisher identity, or staged publishing is present, leaving the origin of the published artifact less independently verifiable.
Four workflows were analyzed and one uses pull_request_target, which can be sensitive when handling untrusted contributions, although no untrusted checkout or script injection was detected.
There are 278 open issues and 41 open pull requests; only one issue was closed and no pull requests were merged during the last month, indicating a backlog and limited recent throughput.
The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities.
| Title | Versions | Severity |
|---|---|---|
CVE-2019-18413 class-validator is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.14.0. | 0.0.0 - 0.14.0 | Critical |
| Dependency | Last Release | Score |
|---|---|---|
validator Version ^13.15.22 | — | — |
@types/validator Version ^13.15.3 | — | — |
libphonenumber-js Version ^1.11.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.