Nexus TypeScript SDK
68%
Total Score
caution
Usable with caveats: the API is explicitly experimental and recent maintenance activity is modest.
The package is 412 days old with four releases and three releases in the last 12 months; the median interval is about 140 days. This shows ongoing release activity, but at a measured pace.
The linked repository has no security policy. This is a transparency gap for a protocol SDK, although it does not by itself indicate abandonment.
Version 0.0.3 is not a stable major release, and the README warns that backwards-incompatible changes are expected. That creates a meaningful compatibility concern for dependents.
Both workflows were analyzed without high- or medium-severity findings, and job-level or read-only permissions are present. One high-confidence low-severity finding installs a package outside a lockfile, while five of 21 action references are unpinned.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.