question: still being maintained?

[ctfrancia]

There is a critical issue with this package and I want to help out, but seeing the pull requests and last publish this looks to be no longer maintained. I'd certainly be willing to help with this, just want to make sure that I'm not the only one.

[talesmgodois]

Hello dude,

so, I know your pain,

Just closed this issue: #1342. This vulnerability is now labeled as moderate instead of critical;

But maybe joi or yup solves your problem

[ctfrancia]

Yeah maybe I'll look at those two alternatives

[bennycode]

Nest.js is recommending class-validator. That's why I am using this package but the open GitHub Advisory makes me want to switch if it doesn't get fixed soon. @NoNameProvided can you draft a new release?

[ctfrancia]

I'm using nestjs as well that's why I am slightly worried about this if nest is recommending a package no longer maintained then maybe there needs to be a pivot with either nestjs to use a maintained package or maybe look into helping this package to update it. But if Nestjs does help this package then it doesn't matter if the pull requests just accumulate like they already appear to be doing.

[tak1n]

I'm using nestjs as well that's why I am slightly worried about this if nest is recommending a package no longer maintained then maybe there needs to be a pivot with either nestjs to use a maintained package or maybe look into helping this package to update it. But if Nestjs does help this package then it doesn't matter if the pull requests just accumulate like they already appear to be doing.

NestJS core team is aware of this problem

[NoNameProvided]

Yes. See #1775 for details.

[github-actions]

This issue has been automatically locked since there has not been any recent activity after it was closed. Please open a new issue for related bugs.