Package Health

@nx/web

The Nx Plugin for Web Components contains generators for managing Web Component applications and libraries within an Nx workspace. It provides: - Integration with libraries such as Jest, Playwright, Cypress, and Storybook. - Scaffolding for creating bu

Latest 23.3.0NPMNPM

86%

Total Score

healthy

Active releases, broad contributor activity, and strong provenance outweigh a repository-name mismatch and workflow hygiene concerns.

Health Score Breakdown

Maintainerscaution

Four of five publishing accounts use the organization domain, consistent with the organization-backed repository. jameshenry (henry.sc) is outside that domain, creating a minor account-hygiene concern but not evidence of limited maintenance capacity.

Repo package mentioncaution

The repository name does not match @nx/web and its README does not mention the package, which is a caution because the linked repository could appear unrelated. However, the package artifact and repository contents indicate an Nx monorepo relationship, partially compensating for the mismatch.

Workflow auditcaution

All 13 workflows were analyzed, with no untrusted checkouts or script-injection findings and all 81 action references pinned. The audit did identify high-confidence template-injection patterns and ad hoc package installs, but no dangerous trigger pairing was reported, so these are workflow-hygiene concerns rather than a severe dependency-health risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
tslib
Version ^2.3.0
—
—
@nx/js
Version 23.3.0
—
—
@nx/devkit
Version 23.3.0
—
—
picocolors
Version ^1.1.0
—
—
detect-port
Version ^2.1.0
—
—

Weekly Downloads

Info

Last Published
4 days ago
Created
3 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform