Vite config wrapper for Lovable TanStack Start projects
74%
Total Score
caution
148 releases in 209 days show active maintenance, but the young package has limited verifiable project transparency.
No build attestation or staged publishing is present, so consumers cannot independently verify how this release artifact was produced despite the GitHub trusted publisher identity.
Eleven of 17 publish-access accounts use the lovable.dev domain, but consumer accounts wiledal (gmail.com) and pbricout (gmail.com), plus outside-domain accounts danielivert (netrek.se), whn (whn.se), gukj (gkdc.co), and aronstrandberg (aronstrandberg.com), create account-hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lightningcss Version ^1.30.0 | — | — |
@tanstack/devtools-vite Version ^0.8.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.