The Nx Plugin for Web Components contains generators for managing Web Component applications and libraries within an Nx workspace. It provides: - Integration with libraries such as Jest, Playwright, Cypress, and Storybook. - Scaffolding for creating bu
86%
Total Score
healthy
Active releases, broad contributor activity, and strong provenance outweigh a repository-name mismatch and workflow hygiene concerns.
Four of five publishing accounts use the organization domain, consistent with the organization-backed repository. jameshenry (henry.sc) is outside that domain, creating a minor account-hygiene concern but not evidence of limited maintenance capacity.
The repository name does not match @nx/web and its README does not mention the package, which is a caution because the linked repository could appear unrelated. However, the package artifact and repository contents indicate an Nx monorepo relationship, partially compensating for the mismatch.
All 13 workflows were analyzed, with no untrusted checkouts or script-injection findings and all 81 action references pinned. The audit did identify high-confidence template-injection patterns and ad hoc package installs, but no dangerous trigger pairing was reported, so these are workflow-hygiene concerns rather than a severe dependency-health risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.3.0 | — | — |
@nx/js Version 23.3.0 | — | — |
@nx/devkit Version 23.3.0 | — | — |
picocolors Version ^1.1.0 | — | — |
detect-port Version ^2.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.