What did nittim read in ajv-validator/ajv?

nittim read 419 of 419 eligible files in ajv-validator/ajv. The reading ran on October 14, 2026. It was taken at commit f177fe3.

Did nittim find committed secrets or vulnerable dependencies in ajv-validator/ajv?

The rule-based scan found 0 committed secrets and 3 vulnerable dependencies in ajv-validator/ajv. Affected: fast-uri (GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc).

← Browse the report library

a public repository, read by nittim

Is ajv-validator/ajv production ready?

What nittim read in this repository, and what it found. Public repository, public reading — sourced from its own code and dependency manifests, nothing else.

The fastest JSON schema Validator. Supports JSON Schema draft-04/06/07/2019-09/2020-12 and JSON Type Definition (RFC8927)

TypeScript · 14.9k stars · last push September 6, 2026

ajv-validator/ajv is a TypeScript repository that provides a JSON schema validator supporting multiple draft versions and JSON Type Definition. The validator is designed for performance and handles various schema standards used in modern applications.

Nittim scanned 419 files and found evidence of issues. The scan identified 3 vulnerable runtime dependencies. The vulnerable package fast-uri has three known advisories: GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, and GHSA-f65p-4m7j-42xc.

Developers should run an audit to understand the specific vulnerabilities in these advisories and determine what action is needed. After addressing the issues, rescan ajv-validator/ajv to confirm the vulnerabilities have been resolved.

Written from nittim's own scan on October 14, 2026; rescanned when the repository changes.

No verdict. The rule-based check reports hard evidence, or reports that it found none. Neither is a judgment on whether this code is safe to ship.

What was read — rule-based scan

Rule-based checks run on nittim's servers — a secret scanner and a dependency check, no model in the path. The code reached those two and stopped there.

Read 419 of 419 eligible files. Commit f177fe3. 2026-10-14.

What the scanners found

Committed secrets on production paths: 0
Vulnerable runtime dependencies: 3

fast-uri (GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc)

Run it yourself

Scan any public repository in seconds — no sign-in, no card. Audit it to have a model read the code. Loop the report into your assistant to get the fixes applied and re-checked.

Scan your own repo

Questions

What did nittim read in ajv-validator/ajv?: nittim read 419 of 419 eligible files in ajv-validator/ajv. The reading ran on October 14, 2026. It was taken at commit f177fe3.
Did nittim find committed secrets or vulnerable dependencies in ajv-validator/ajv?: The rule-based scan found 0 committed secrets and 3 vulnerable dependencies in ajv-validator/ajv. Affected: fast-uri (GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc).
Is ajv-validator/ajv production ready?: A free scan is not a verdict. A full audit gives one.

Is ajv-validator/ajv production ready?

What was read — rule-based scan

What the scanners found

Run it yourself

Questions

More like this