vest
Declarative Form Validations Framework
13
Versions
MIT
License
No
Install Scripts
Verified
Provenance
Supply chain provenance
Status for the latest visible version.
SLSA provenance attestation
npm registry signatures
gitHead linked
Maintainers
ealush
Keywords
Form validationUnit testingFramework-agnosticValidationDeclarativeAsynchronous validationsAsync validationsTestingData validationForm validationReact ValidationAngular ValidationVue ValidationSvelte Validationnodejs Validationenforce
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| typosquat | typosquat.levenshtein:jest | AI (typosquat): vest is a legitimate, well-established form validation library (4139 days, 424 versions, 55k weekly downloads), not a typosquat of jest. The name similarity is purely coincidental. | ai | |
| typosquat | typosquat.levenshtein:next | AI (typosquat): vest is a legitimate package unrelated to next.js. Levenshtein match is coincidental. | ai | |
| typosquat | typosquat.levenshtein:vitest | AI (typosquat): vest predates vitest and is an unrelated form validation library. Levenshtein match is coincidental. | ai | |
| dependencies | unvetted-dep:n4s | AI (dependencies): n4s is part of the vest monorepo ecosystem, a first-party dependency published alongside vest. | ai | |
| dependencies | unvetted-dep:context | AI (dependencies): context is part of the vest monorepo ecosystem, a first-party dependency published alongside vest. | ai | |
| dependencies | unvetted-dep:vestjs-runtime | AI (dependencies): vestjs-runtime is part of the vest monorepo ecosystem, a first-party dependency published alongside vest. | ai |