@nx/nx-darwin-arm64

This release appears healthy to depend on: it is actively and frequently released, is not deprecated, has npm provenance, and is backed by a clearly active organization-owned repository with substantial recent commit, issue, pull request, testing, release, and security activity. The minimal three-file artifact and lack of type declarations are appropriate for a platform-specific native binary package, while the repository provides compensating project scaffolding. The main residual concerns are incomplete top-level workflow permission declarations and the repository not explicitly naming this platform package in its README, though the organization-backed Nx monorepo context makes the latter less concerning.

Latest 23.2.1

NPM

92%

Total Score

Maintainer Stability

100

Maturity

Supply Chain

Attestations

100

Health Score Breakdown

Repo package mention

The repository name does not match this platform package and its README does not mention the package, which creates some provenance ambiguity; however, the organization-owned Nx monorepo context makes a subpackage name mismatch plausible.

Token permissions

Six workflows lack top-level permissions declarations and one declares top-level write access, leaving some workflow privilege-hardening gaps despite other security controls.