TypeScript

TypeScript is supported for Snyk Open Source and Snyk Code.

Applicability

You can use TypeScript versions up to 4.2

The following functions are available for TypeScript:

• SCM import

• Test or monitor your app through CLI and IDE

• Test your app's SBOM: using pkg:npm

• Test your app's packages using pkg:npm

Package managers and supported file extensions

For TypeScript, Snyk supports npm, pnpm, Yarn as package managers, with the following versions:

• npm: Lockfile 1, Lockfile 2, Lockfile 3

• pnpm: pnpm 7, pnpm 8, pnpm 9

• Yarn: Yarn 1, Yarn 2, Yarn 3

As a package registry, Snyk supports npmjs.org.

For TypeScript, Snyk supports the following file formats:

• Snyk Open Source:

  • npm: package.json, package-lock.json

  • pnpm: pnpm-lock.yaml

  • Yarn: yarn.lock

• For Snyk Code: .ejs, .es, .es6, .htm, .html, .js, .jsx, .ts, .cts, .mts, .tsx, .vue, .mjs, .cjs

Frameworks and libraries

For TypeScript, Snyk supports the following frameworks and libraries:

• All JavaScript frameworks and libraries. For more information, see JavaScript frameworks and libraries.

• @Google Drive/generative-ai - Comprehensive

• @anthropic-ai/sdk - Comprehensive

• @huggingface/inference - Comprehensive

• @mistralai/mistralai - Comprehensive

• axios - Comprehensive

• Angular - Partial

• apollo-server - Partial

• bcrypt-nodejs - Comprehensive

• cross-spawn - Comprehensive

• crypto-js - Comprehensive

• date-fns - Comprehensive

• dayjs - Comprehensive

• dompurify - Comprehensive

• electron - Partial

• ejs - Partial

• execa - Comprehensive

• express - Comprehensive

• express-graphql - Partial

• express-jwt - Partial

• fs - Comprehensive

• fs-extra - Comprehensive

• fs-plus - Comprehensive

• graceful-fs - Comprehensive

• graphql-js - Partial

• grpc-js - Comprehensive

• jQuery - Comprehensive

• js-yaml - Comprehensive

• jzip - Comprehensive

• koa - Comprehensive

• koa-graphql - Comprehensive

• libxml - Comprehensive

• libxmljs - Comprehensive

• lodash - Comprehensive

• luxon - Comprehensive

• minimongo - Comprehensive

• minimist - Comprehensive

• mongodb - Comprehensive

• Mongoose - Comprehensive

• mercurius - Partial

• Nestjs - Partial

• Node Crypto - Comprehensive

• node-buffer - Partial

• node-cmd - Comprehensive

• Node Crypto - Comprehensive

• node-dir - Comprehensive

• node-forge - Comprehensive

• node-pty - Comprehensive

• node-serialize - Comprehensive

• octokit - Comprehensive

• openai - Comprehensive

• pg - Comprehensive

• pg-promise - Comprehensive

• React - Partial

• request-promise - Comprehensive

• restler - Partial

• rimraf - Comprehensive

• sanitize-html - Comprehensive

• shelljs - Comprehensive

• Stanford JS Crypto - Comprehensive

• superagent - Comprehensive

• tar-stream - Comprehensive

• unirest - Comprehensive

• unzip - Comprehensive

• underscore - Comprehensive

• url - Comprehensive

• vm - Comprehensive

• webstomp-client - Partial

• WebCryptoAPI - Comprehensive

• xpath - Comprehensive

• yargs - Comprehensive

Features

For TypeScript with Snyk Open Source, the following features are supported:

• License scanning

• Reports

For TypeScript with Snyk Code, the following features are supported:

• Reports

• Custom rules

• Interfile analysis

The Snyk FixPR feature is not available for TypeScript. This means that you will not be notified if the PR checks fail when the following conditions are met:

• The PR checks feature is enabled and configured to Only fail when the issues found have a fix available.

• "Fixed in" available is set to Yes.