@nrwl/js MIT 51 versions

@nrwl/js

npm Repository Homepage

The JS plugin for Nx contains executors and generators that provide the best experience for developing JavaScript and TypeScript projects.

51

Versions

MIT

License

No

Install Scripts

Verified

Provenance

Supply chain provenance

Status for the latest visible version.

SLSA provenance attestation npm registry signatures No source commit

Maintainers

jack-nrwlmeeroslavnrwlownernrwl-jasonjuristraltan-nrwljameshenry

Keywords

MonorepoWebNodeSwcTscCLI

Accepted risks

Findings the reviewer chose to accept rather than block on.

Source	Rule	Reason	Accepted by	When
provenance	missing-githead	AI (provenance): SLSA attestation present; gitHead absence is benign publish-env variance for this official package.	ai	2026/07/19
typosquat	typosquat.levenshtein:jest	AI (typosquat): Official Nx package; edit-distance coincidence, not impersonation.	ai	2026/07/19
typosquat	typosquat.levenshtein:pg	AI (typosquat): Official Nx package; false positive.	ai	2026/07/19
typosquat	typosquat.levenshtein:qs	AI (typosquat): Established official Nx package; scoped name coincidentally near 'qs'.	ai	2026/07/19
typosquat	typosquat.levenshtein:joi	AI (typosquat): Official Nx package; false positive.	ai	2026/07/19
typosquat	typosquat.levenshtein:ajv	AI (typosquat): Official Nx package; false positive.	ai	2026/07/19
typosquat	typosquat.levenshtein:rxjs	AI (typosquat): Official Nx package; false positive.	ai	2026/07/19

Versions (showing 51 of 57)

View all versions

Version	Deps	Published
19.8.14	1 / 0	2024-12-03
19.8.13	1 / 0	2024-11-25
19.8.12	1 / 0	2024-11-22
19.8.11	1 / 0	2024-11-15
19.8.10	1 / 0	2024-11-04
19.8.9	1 / 0	2024-10-31
19.8.8	1 / 0	2024-10-25
19.8.7	1 / 0	2024-10-25
19.8.6	1 / 0	2024-10-18
19.8.5	1 / 0	2024-10-15
19.8.4	1 / 0	2024-10-04
19.8.3	1 / 0	2024-10-01
19.8.2	1 / 0	2024-09-26
19.8.1	1 / 0	2024-09-25
19.8.0	1 / 0	2024-09-20
19.7.5	1 / 0	2024-11-22
19.7.4	1 / 0	2024-09-18
19.7.3	1 / 0	2024-09-12
19.7.2	1 / 0	2024-09-10
19.7.1	1 / 0	2024-09-10
19.7.0	1 / 0	2024-09-09
19.6.7	1 / 0	2024-11-22
19.6.6	1 / 0	2024-09-09
19.6.5	1 / 0	2024-09-03
19.6.4	1 / 0	2024-08-28
19.6.3	1 / 0	2024-08-26
19.6.2	1 / 0	2024-08-21
19.6.1	1 / 0	2024-08-19
19.6.0	1 / 0	2024-08-15
19.5.10	1 / 0	2024-11-22
19.5.9	1 / 0	2024-10-15
19.5.8	1 / 0	2024-10-08
19.5.7	1 / 0	2024-08-07
19.5.6	1 / 0	2024-08-01
19.5.5	1 / 0	2024-08-01
19.5.4	1 / 0	2024-07-31
19.5.3	1 / 0	2024-07-25
19.5.2	1 / 0	2024-07-23
19.5.1	1 / 0	2024-07-18
19.5.0	1 / 0	2024-07-17
19.4.4	1 / 0	2024-07-16
19.4.3	1 / 0	2024-07-12
19.4.2	1 / 0	2024-07-08
19.4.1	1 / 0	2024-07-05
19.4.0	1 / 0	2024-07-02
19.3.2	1 / 0	2024-06-26
19.3.1	1 / 0	2024-06-21
19.3.0	1 / 0	2024-06-13
19.2.3	1 / 0	2024-06-10
19.2.2	1 / 0	2024-06-07
19.2.1	1 / 0	2024-06-06

v19.8.14

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.13

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.12

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.11

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.10

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.8

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.7

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.6

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.5

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.4

2 findings

HIGH Missing gitHead — previous versions had it provenance

This version has no gitHead field linking it to a source commit, but previous versions did. This suggests the publish environment changed. Published by: nrwl-jason.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.3

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.2

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.1

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.8.0

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.7.5

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.7.4

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.7.3

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.7.2

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.7.1

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.7.0

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.6.7

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.6.6

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.6.5

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.6.4

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.6.3

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.6.2

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.6.1

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.6.0

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.5.10

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.5.9

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.5.8

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.5.7

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.5.6

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.5.5

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.5.4

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.5.3

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.5.2

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.5.1

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.5.0

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.4.4

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.4.3

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.4.2

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.4.1

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.4.0

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.3.2

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.3.1

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.3.0

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.2.3

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.2.2

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

v19.2.1

2 findings

HIGH typosquat.levenshtein: Possible typosquat of 'qs' typosquat

Package name '@nrwl/js' is 1 edit(s) away from popular package 'qs'.

INFO Has SLSA provenance attestation provenance

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.