The Nx Plugin for building and testing applications using Vite
88%
Total Score
healthy
Active releases and broad contributor activity support this package; workflow hygiene is the main remaining concern.
Four of five publishing accounts use the nrwl.io domain, consistent with the organization-backed repository; jameshenry (henry.sc) is an outside-domain publishing account, which is a minor account-hygiene concern.
All 13 workflows were analyzed with no untrusted checkouts or script-injection findings, and all 81 action references are pinned. High-confidence adhoc-package findings and one workflow with top-level write permissions are workflow-hygiene cautions; the low-confidence cache findings and template-injection findings are not independently decisive.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ajv Version ^8.0.0 | — | — |
tslib Version ^2.3.0 | — | — |
@nx/js Version 23.3.0 | — | — |
semver Version ^7.6.3 | — | — |
picomatch Version 4.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.