@nrwl/tao

CLI for generating code and running commands

Latest 19.8.4

NPM

30%

Total Score

unhealthy

Risky: the package says it is deprecated in favor of nx and has had no release in the last 12 months.

Health Score Breakdown

Package scaffolding

The package README explicitly says @nrwl/tao has been deprecated in favor of nx and will no longer be published in Nx v19. Repository tests and changelog support the underlying project, but not this package's future.

Release history

This package has a substantial history with 1,629 releases, but it has had 0 releases in the last 12 months and its latest release was about 16 months ago, indicating the package line is no longer actively released.

Repo package mention

The linked repository is the nx monorepo, but it neither matches the package name nor mentions @nrwl/tao in its README. That makes package ownership less transparent, although the monorepo relationship is plausible.

Workflow audit

All 13 workflows were analyzed, none use untrusted checkout paths or script-injection sinks, and all 81 action references are pinned. High-confidence template-injection findings and ad hoc package installs remain workflow hygiene concerns, but no dangerous trigger-and-sink combination was shown.