Package Health

class-validator

Decorator-based property validation for classes.

Latest 0.15.1NPMNPM

68%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

63

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

95

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

70

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers during the last three months. This is the strongest concern because it suggests current maintenance has paused despite the recent package release.

Build provenancecaution

No build attestation, trusted publisher identity, or staged publishing is present, leaving the origin of the published artifact less independently verifiable.

Dangerous workflowscaution

Four workflows were analyzed and one uses pull_request_target, which can be sensitive when handling untrusted contributions, although no untrusted checkout or script injection was detected.

Repo issue activitycaution

There are 278 open issues and 41 open pull requests; only one issue was closed and no pull requests were merged during the last month, indicating a backlog and limited recent throughput.

Security policycaution

The repository has no security policy, so there is no documented channel or process for reporting and handling vulnerabilities.

Vulnerabilities

TitleVersionsSeverity
CVE-2019-18413
class-validator is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.14.0.
0.0.0 - 0.14.0
Critical

Package versions

Direct Dependencies

DependencyLast ReleaseScore
validator
Version ^13.15.22
—
—
@types/validator
Version ^13.15.3
—
—
libphonenumber-js
Version ^1.11.1
—
—

Weekly Downloads

Info

Last Published
7 months ago
Created
10 years ago
Unpacked Size
5.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform