@nx/vite

@nx/vite 23.2.1 appears to be a healthy, actively maintained dependency. It has a long release history with 1,908 releases and 529 releases in the last 12 months, is not deprecated, has MIT licensing and TypeScript declarations, and includes npm provenance attestation. The linked Nx repository is organization-backed, active, well-supported by 42 maintainers and 608 commits in the last 3 months, has substantial issue and pull-request throughput, security scanning, a security policy, and no analyzed dangerous workflow patterns. The package artifact omits tests and a changelog, but the repository contains both and uses GitHub Releases, which compensates for that packaging gap. The main residual concern is that six workflows lack top-level permission declarations, although only one workflow declares top-level write access and the broader repository activity and security controls are strong.

Latest 23.2.1

NPM

94%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

100

Supply Chain

Attestations

100

Health Score Breakdown

Token permissions

Six of 13 workflows lack top-level permission declarations and one workflow declares top-level write access, creating a modest workflow-hardening gap; this is partly offset by six workflows with read-only permissions and the absence of other dangerous workflow patterns.