@nx/workspace
This release presents a very strong dependency-health profile. It has exceptionally active release and repository activity, substantial maintainer participation, organization backing, balanced contributor activity, current repository state, npm provenance attestation, licensing, type declarations, security tooling, and no install-time lifecycle scripts or registry deprecation. The package artifact omits tests and a changelog, but the linked repository contains both and uses GitHub Releases, so those omissions are compensated. The main residual concern is that six of thirteen workflows lack top-level token permissions, which is a repository hygiene gap, though no dangerous workflow patterns were detected.
96%
Total Score
100
100
100
90
100
Malware detected in 2 versions
Health Score Breakdown
Six of thirteen workflows lack top-level token permissions, and one workflow declares top-level write permissions; this is a cautionary permissions-hygiene gap, although the analyzed workflows show no dangerous execution patterns.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 nx Version 23.2.1 | — | — |
chalk Version ^4.1.0 | — | — |
tslib Version ^2.3.0 | — | — |
semver Version ^7.6.3 | — | — |
picomatch Version 4.0.4 | — | — |
Weekly Downloads
Info
- Last Published
- 27 days ago
- Created
- 3 years ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.