a public repository, read by nittim
Is colinhacks/zod production ready?
What nittim read in this repository, and what it found. Public repository, public reading — sourced from its own code and dependency manifests, nothing else.
TypeScript-first schema validation, no runtime dependencies.
TypeScript · 43.5k stars
Verdict
High Risk
Material risks remain. Remediate before relying on this in production.
What was read — AI audit
The AI reading sends the selected files to Anthropic's API and reads the answer back. Anthropic deletes inputs and outputs within 30 days and does not use them for training. nittim keeps the report.
Read 520 of 566 eligible files. Commit e516c3b. 2026-08-21.
What the scanners found
- Committed secrets
- 2
- Vulnerable dependencies
- 17
What the reading raised
- Critical
- 0
- High
- 1
- Medium
- 3
- Low
- 6
- Info
- 4
Counts only. The issues themselves go to whoever runs the reading.
What was read — rule-based scan
Rule-based checks run on nittim's servers — a secret scanner and a dependency check, no model in the path. The code reached those two and stopped there.
Read 500 of 666 eligible files. Commit e516c3b. 2026-08-21.
What the scanners found
- Committed secrets on production paths
- 0
- Vulnerable runtime dependencies
- 7
brace-expansion (GHSA-3jxr-9vmj-r5cp, GHSA-mh99-v99m-4gvg), next (GHSA-267c-6grr-h53f, GHSA-26hh-7cqf-hhc6, GHSA-36qx-fr4f-26g5)
Run it yourself
Scan any public repository in seconds — no sign-in, no card. Audit it to have a model read the code. Loop the report into your assistant to get the fixes applied and re-checked.
Scan your own repoQuestions
- What did nittim read in colinhacks/zod?
- nittim read 520 of 566 eligible files in colinhacks/zod. The reading ran on August 21, 2026. It was taken at commit e516c3b.
- Did nittim find committed secrets or vulnerable dependencies in colinhacks/zod?
- The rule-based scan found 0 committed secrets and 7 vulnerable dependencies in colinhacks/zod. Affected: brace-expansion (GHSA-3jxr-9vmj-r5cp, GHSA-mh99-v99m-4gvg), next (GHSA-267c-6grr-h53f, GHSA-26hh-7cqf-hhc6, GHSA-36qx-fr4f-26g5).
- Is colinhacks/zod production ready?
- nittim's verdict for colinhacks/zod is High Risk. Material risks remain. Remediate before relying on this in production.
More like this
More TypeScript repositories →More repositories with this verdict →
Add the badge to your README
[](https://nittim.com/library/colinhacks/zod)