Build system, optimized for monorepos, with AI-powered architectural awareness and advanced CI capabilities.
Installations
npm install @nrwl/jestDeveloper Guide
BETA
Typescript
Yes
Module System
CommonJS
Node Version
18.20.4
NPM Version
10.7.0
Score
48.3
Supply Chain
28.3
Quality
87.2
Maintenance
100
Vulnerability
95.6
License
Releases
900
Contributors
1,030
Languages
7
TypeScript
Rust
JavaScript
CSS
Shell
HTML
Objective-C
TypeScript (96.89%)
Rust (1.57%)
JavaScript (1.34%)
CSS (0.12%)
Shell (0.05%)
HTML (0.02%)
Objective-C (0.01%)
Love this project? Help keep it running — sponsor us today! 🚀
Developer
Download Statistics
Total Downloads
215,598,580
Last Day
207,609
Last Week
1,038,294
Last Month
4,710,392
Last Year
67,455,774
GitHub Statistics
MIT License
24,649 Stars
14,348 Commits
2,449 Forks
172 Watchers
299 Branches
1,030 Contributors
Updated on Feb 20, 2025
Maintainers
7
Package Meta Information
Latest Version
19.8.4
Package Id
@nrwl/jest@19.8.4
Unpacked Size
3.60 kB
Size
2.08 kB
File Count
11
NPM Version
10.7.0
Node Version
18.20.4
Published on
Oct 04, 2024
Total Downloads
Cumulative downloads
Total Downloads
215,598,580
Last Day
-2.5%
207,609
Compared to previous day
Last Week
-6.5%
1,038,294
Compared to previous week
Last Month
43.2%
4,710,392
Compared to previous month
Last Year
6.3%
67,455,774
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
1
@nrwl/jest has been renamed to @nx/jest!
@nrwl/jest has been renamed to @nx/jest. Please use that instead.
@nrwl/jest will no longer be published in the future.
Nx: Smart Monorepos · Fast CI
Nx is a build system, optimized for monorepos, with plugins for popular frameworks and tools and advanced CI capabilities including caching and distribution.
No vulnerabilities found.
Reason
30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Reason
all changesets reviewed
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
no dangerous workflow patterns detected
Reason
branch protection is not maximal on development and all release branches
Details
- Info: 'allow deletion' disabled on branch 'master'
- Info: 'force pushes' disabled on branch 'master'
- Warn: 'branch protection settings apply to administrators' is disabled on branch 'master'
- Warn: required approving review count is 1 on branch 'master'
- Info: codeowner review is required on branch 'master'
- Info: status check found to merge onto on branch 'master'
- Info: PRs are required in order to make changes on branch 'master'
Reason
binaries present in source code
Details
- Warn: binary detected: e2e/gradle/gradle/wrapper/gradle-wrapper.jar:1
- Warn: binary detected: graph/client-e2e/cypress/downloads/downloads.html:1
- Warn: binary detected: packages/react-native/src/generators/application/files/app/android/gradle/wrapper/gradle-wrapper.jar:1
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e-matrix.yml:106
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/e2e-windows.yml:75
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/npm-audit.yml:13
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/publish.yml:359
- Warn: no topLevel permission defined: .github/workflows/ci.yml:1
- Warn: no topLevel permission defined: .github/workflows/do-not-merge.yml:1
- Info: found token with 'none' permissions: .github/workflows/e2e-matrix.yml:1
- Info: found token with 'none' permissions: .github/workflows/e2e-windows.yml:1
- Warn: no topLevel permission defined: .github/workflows/generate-embeddings.yml:1
- Info: topLevel 'issues' permission set to 'read': .github/workflows/issue-notifier.yml:9
- Info: topLevel 'pull-requests' permission set to 'read': .github/workflows/issue-notifier.yml:10
- Info: found token with 'none' permissions: .github/workflows/npm-audit.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish.yml:1
- Info: found token with 'none' permissions: .github/workflows/schedule-stale.yml:1
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Info: Possibly incomplete results: error parsing shell code: > must be followed by a word: packages/node/src/generators/setup-docker/files/Dockerfile__tmpl__:13-14
- Info: Possibly incomplete results: error parsing shell code: not a valid arithmetic operator: ': .github/workflows/e2e-matrix.yml:502
- Info: Possibly incomplete results: error parsing shell code: not a valid arithmetic operator: .: .github/workflows/e2e-matrix.yml:546
- Info: Possibly incomplete results: error parsing shell code: not a valid arithmetic operator: ': .github/workflows/e2e-windows.yml:363
- Info: Possibly incomplete results: error parsing shell code: not a valid arithmetic operator: .: .github/workflows/e2e-windows.yml:405
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:54: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/ci.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/ci.yml:129: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:136: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/ci.yml:151: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/ci.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:690: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:707: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:723: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:738: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:53: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:92: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:395: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:400: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:407: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:414: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:441: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:450: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:515: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:525: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:539: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-matrix.yml:552: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-matrix.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:294: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:299: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:306: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:313: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:323: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:373: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:383: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:397: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:411: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:447: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:464: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:35: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/e2e-windows.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/e2e-windows.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-embeddings.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/generate-embeddings.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-embeddings.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/generate-embeddings.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/generate-embeddings.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/generate-embeddings.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/generate-embeddings.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/generate-embeddings.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-notifier.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/issue-notifier.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-notifier.yml:21: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/issue-notifier.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-notifier.yml:26: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/issue-notifier.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-notifier.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/issue-notifier.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-notifier.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/issue-notifier.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/issue-notifier.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/issue-notifier.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/issue-notifier.yml:64: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/issue-notifier.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/lock-threads.yml:20: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/lock-threads.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/npm-audit.yml:17: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/npm-audit.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/npm-audit.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/npm-audit.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/npm-audit.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/npm-audit.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:58: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:204: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:209: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:214: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:222: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:228: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:238: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:259: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:296: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:305: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:347: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:370: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish.yml:375: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:380: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:391: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:426: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish.yml:448: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/publish.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule-stale.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/schedule-stale.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule-stale.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/schedule-stale.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule-stale.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/schedule-stale.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule-stale.yml:78: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/schedule-stale.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/schedule-stale.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/nrwl/nx/schedule-stale.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: packages/node/src/generators/setup-docker/files/Dockerfile__tmpl__:22
- Info: 0 out of 58 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 33 third-party GitHubAction dependencies pinned
- Info: 0 out of 1 npmCommand dependencies pinned
Reason
64 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: RUSTSEC-2024-0350 / GHSA-7w47-3wg8-547c
- Warn: Project is vulnerable to: RUSTSEC-2024-0367 / GHSA-v26r-4c9c-h3j6
- Warn: Project is vulnerable to: RUSTSEC-2024-0371 / GHSA-m8rp-vv92-46c7
- Warn: Project is vulnerable to: RUSTSEC-2024-0351 / GHSA-49jc-r788-3fc9
- Warn: Project is vulnerable to: RUSTSEC-2024-0421 / GHSA-h97m-ww89-6jmq
- Warn: Project is vulnerable to: RUSTSEC-2017-0008
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-ghr5-ch3p-vcr6
- Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
- Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
- Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
- Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-c59h-r6p8-q9wc
- Warn: Project is vulnerable to: GHSA-7m27-7ghc-44w9
- Warn: Project is vulnerable to: GHSA-g77x-44xx-532m
- Warn: Project is vulnerable to: GHSA-7gfc-8cq8-jh5f
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-hc6q-2mpp-qw7j
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986 / GHSA-64vr-g452-qvp3
- Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-4q6p-r6v2-jvc5
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-353f-5xf4-qw67
- Warn: Project is vulnerable to: GHSA-c24v-8rfc-w8vw
- Warn: Project is vulnerable to: GHSA-8jhw-289h-jh2g
- Warn: Project is vulnerable to: GHSA-9cwx-2883-4wfx
- Warn: Project is vulnerable to: GHSA-vg6x-rcgg-rjx6
- Warn: Project is vulnerable to: GHSA-f6v4-cf5j-vf3w
- Warn: Project is vulnerable to: GHSA-m7xq-9374-9rvx
- Warn: Project is vulnerable to: GHSA-vg7j-7cwx-8wgw
- Warn: Project is vulnerable to: GHSA-8hc4-vh64-cxmj
- Warn: Project is vulnerable to: GHSA-2452-6xj8-jh47
- Warn: Project is vulnerable to: GHSA-x4c5-c7rf-jjgv
- Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
- Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
- Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
- Warn: Project is vulnerable to: GHSA-593f-38f6-jp5m
- Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488
- Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g
- Warn: Project is vulnerable to: GHSA-pwfr-8pq7-x9qv
- Warn: Project is vulnerable to: GHSA-36m4-6v6m-4vpr
- Warn: Project is vulnerable to: GHSA-q22g-8fr4-qpj4
- Warn: Project is vulnerable to: GHSA-v2p6-4mp7-3r9v
- Warn: Project is vulnerable to: GHSA-c76h-2ccp-4975
Score
4.8
/10
Last Scanned on 2025-02-10
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn MoreOther packages similar to @nrwl/jest
@nrwl/tao
19.8.4
CLI for generating code and running commands
@nrwl/devkit
19.8.4
The Nx Devkit is used to customize Nx for different technologies and use cases. It contains many utility functions for reading and writing files, updating configuration, working with Abstract Syntax Trees(ASTs), and more. Learn more about [extending Nx by
@nrwl/workspace
19.8.4
The Workspace plugin contains executors and generators that are useful for any Nx workspace. It should be present in every Nx workspace and other plugins build on it.
@nrwl/cli
15.9.3
Smart, Fast and Extensible Build System