express-zod-api
A Typescript framework to help you get an API server up and running with I/O schema validation and custom middlewares in minutes.
82%
Total Score
healthy
Healthy—active maintenance and transparent packaging outweigh single-maintainer concentration and unpinned actions.
Health Score Breakdown
All 111 recent commits came from one contributor, so maintenance depends heavily on a single individual despite the high activity level.
All seven workflows were analyzed with no audit findings, no untrusted checkout or script-injection paths, and some read-only or job-scoped permissions. However, all 25 action references are unpinned, which is a workflow supply-chain hygiene concern.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10424 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. express-zod-api is vulnerable to Generation of Error Message Containing Sensitive Information in versions 1.0.0 - 20.17.0. | 1.0.0 - 20.17.0 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ansis Version ^4.3.1 | — | — |
ramda Version ^0.32.0 | — | — |
openapi3-ts Version ^4.6.0 | — | — |
node-mocks-http Version ^1.18.0 | — | — |
Weekly Downloads
Info
- Last Published
- 11 days ago
- Created
- 5 years ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.