@nx/js
The JS plugin for Nx contains executors and generators that provide the best experience for developing JavaScript and TypeScript projects.
90%
Total Score
healthy
Frequent releases, active contributors, provenance, and project security practices outweigh minor workflow and publisher-account concerns.
Malware detected in 2 versions
Health Score Breakdown
Four of five publishing accounts use the organization domain, consistent with the organization-owned repository. The outside-domain account jameshenry (henry.sc) is a minor account-hygiene concern, not evidence of limited maintenance capacity.
The repository name does not match @nx/js and its README does not explicitly mention that package. This is plausible for a monorepo subpackage, but the missing explicit association leaves a small transparency concern.
All 13 workflows were analyzed successfully, all 81 action references are pinned, and no untrusted checkout or script-injection paths were found. High-confidence template-injection findings and low-confidence cache findings remain workflow-hygiene concerns, without the dangerous triggers that would raise their impact.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 chalk Version ^4.1.0 | — | — |
tslib Version ^2.3.0 | — | — |
ignore Version ^7.0.5 | — | — |
semver Version ^7.6.3 | — | — |
columnify Version ^1.6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 3 years ago
- Unpacked Size
- 0.8 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.