TypeScript

Applicability

Snyk supports TypeScript for Snyk Open Source and Snyk Code. In Snyk Open Source, TypeScript is supported in exactly the same way as JavaScript.

Check the language availability to be imported as an application, tested, or monitored using the Snyk products.

TypeScript supported versions

You can use versions up to 4.2.

Available functions:

• SCM import, available for Snyk Open Source and Snyk Code.

• Test or monitor your app through CLI and IDE, available for Snyk Open Source and Snyk Code.

• Test your app's SBOM: using pkg:npm

• Test your app's packages using pkg:npm

Package managers and Supported files

Snyk for TypeScript supports npm, pnpm, Yarn as package managers with the following versions for them:

• npm: Lockfile 1, Lockfile 2, Lockfile 3, 7.*

• pnpm: pnpm 7, pnpm 8, pnpm 9

• Yarn: Yarn 1, Yarn 2, Yarn 3

As a package registry, it supports npmjs.org.

Snyk for TypeScript supports the following file formats:

• Snyk Open Source:

  • For npm: package.json, package-lock.json

  • For pnpm: pnpm-lock.yaml,

  • For yarn: yarn.lock

• Snyk Code: .ejs, .es, .es6, .htm, .html, .js, .jsx, .ts, .cts, .mts, .tsx, .vue, .mjs, .cjs

Frameworks and libraries

The following frameworks and libraries are supported in Snyk for TypeScript:

• All JavaScript frameworks and libraries

• @Google Drive/generative-ai - Comprehensive

• @anthropic-ai/sdk - Comprehensive

• @huggingface/inference - Comprehensive

• @mistralai/mistralai - Comprehensive

• axios - Comprehensive

• Angular - Partial

• apollo-server - Partial

• bcrypt-nodejs - Comprehensive

• cross-spawn - Comprehensive

• crypto-js - Comprehensive

• date-fns - Comprehensive

• dayjs - Comprehensive

• dompurify - Comprehensive

• electron - Partial

• ejs - Partial

• execa - Comprehensive

• express - Comprehensive

• express-graphql - Partial

• express-jwt - Partial

• fs - Comprehensive

• fs-extra - Comprehensive

• fs-plus - Comprehensive

• graceful-fs - Comprehensive

• graphql-js - Partial

• grpc-js - Comprehensive

• jQuery - Comprehensive

• js-yaml - Comprehensive

• jzip - Comprehensive

• koa - Comprehensive

• koa-graphql - Comprehensive

• libxml - Comprehensive

• libxmljs - Comprehensive

• lodash - Comprehensive

• luxon - Comprehensive

• minimongo - Comprehensive

• minimist - Comprehensive

• mongodb - Comprehensive

• Mongoose - Comprehensive

• mercurius - Partial

• Nestjs - Partial

• Node Crypto - Comprehensive

• node-buffer - Partial

• node-cmd - Comprehensive

• Node Crypto - Comprehensive

• node-dir - Comprehensive

• node-forge - Comprehensive

• node-pty - Comprehensive

• node-serialize - Comprehensive

• octokit - Comprehensive

• openai - Comprehensive

• pg - Comprehensive

• pg-promise - Comprehensive

• React - Partial

• request-promise - Comprehensive

• restler - Partial

• rimraf - Comprehensive

• sanitize-html - Comprehensive

• shelljs - Comprehensive

• Stanford JS Crypto - Comprehensive

• superagent - Comprehensive

• tar-stream - Comprehensive

• unirest - Comprehensive

• unzip - Comprehensive

• underscore - Comprehensive

• url - Comprehensive

• vm - Comprehensive

• webstomp-client - Partial

• WebCryptoAPI - Comprehensive

• xpath - Comprehensive

• yargs - Comprehensive

Features

The following features are supported in Snyk for TypeScript:

Snyk Open Source	Snyk Code
License scanning Reports	Reports Custom rules Interfile analysis

PR Checks configured to “Only fail when the issues found have a fix available” rely on Snyk FixPR support and will not alert for TypeScript or other languages that do not support FixPRs.