On Gold's security & health signals, jest is the safer choice.
| Signal | jest | vitest |
|---|---|---|
| Safety verdict | Looks safe to use | Use with caution — high-severity vulnerabilities |
| Safety score | 82/100 | 42/100 |
| Known CVEs | 0 | 0 |
| Critical / High | 0 | 7 |
| Actively exploited (KEV) | No | No |
| Health grade | B | B |
| Weekly downloads | 45.5M | 82.3M |
| License | — | — |
| Deprecated | No | No |
Comparison uses public Gold data (vulnerabilities, CISA KEV, OpenSSF health, downloads, license). It compares the packages' current security posture — evaluate API fit and features separately. See each package's full report, or scan your manifest.