validator

String validation and sanitization

Latest 13.15.35

NPM

91%

Total Score

Maintainer Stability

Dependencies

100

Maturity

100

Supply Chain

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

Repo issue activity

The repository received 7 new issues and 29 new pull requests in the last month, but closed no issues and merged only 1 pull request, leaving a notable backlog. This is a maintenance caveat, not abandonment evidence by itself.

Token permissions

All 3 workflows lack top-level permissions declarations, and none declares read-only permissions; although two use job-level permissions, this leaves workflow authorization less explicit than ideal.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2025-10980 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. validator is vulnerable to Cross-Site Scripting (XSS) in versions 5.0.0 - 13.15.25.	5.0.0 - 13.15.25	Medium
CVE-2025-12758 validator is vulnerable to Encoding Error in versions 0.0.0 - 13.15.22.	0.0.0 - 13.15.22	High
CVE-2025-56200 validator is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 13.15.20.	0.0.0 - 13.15.20	Medium
CVE-2021-3765 validator is vulnerable to Inefficient Regular Expression Complexity in versions 0.0.0 - 13.7.0.	0.0.0 - 13.7.0	Medium
CVE-2014-8882 validator is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 3.22.1.	0.0.0 - 3.22.1	High