Package Health

zod

TypeScript-first schema declaration and validation library with static type inference

Latest 4.6.4NPMNPM

91%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

70

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

95

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

90

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

100

Are you affected? Scan for Free

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-161437 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
zod is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 3.21.0 - 4.4.3.
3.21.0 - 4.4.3
Low
AIKIDO-2026-500926 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
zod is vulnerable to Prototype Pollution in versions 4.0.0 - 4.4.3.
4.0.0 - 4.4.3
Low
AIKIDO-2026-10707 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
zod is vulnerable to Prototype Pollution in versions 1.0.0 - 4.3.6.
1.0.0 - 4.3.6
Medium
AIKIDO-2026-10706 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
zod is vulnerable to Improper Input Validation in versions 1.0.0 - 4.3.6.
1.0.0 - 4.3.6
Medium
CVE-2023-4316
zod is vulnerable to Inefficient Regular Expression Complexity in versions 0.0.0 - 3.22.2.
0.0.0 - 3.22.2
Medium

Package versions

Maintainers

Direct Dependencies

No direct dependencies.

Weekly Downloads

Info

Last Published
14 hours ago
Created
6 years ago
Unpacked Size
5.9 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform