@quasar/app-vite

Quasar Framework App CLI with Vite: SPA, SSR, SSG, PWA, browser extension, mobile and desktop apps from one codebase, with documentation your AI coding agent reads offline

Latest 3.10.2

NPM

86%

Total Score

healthy

Strong release cadence and active organization-backed development outweigh workflow-action and template-injection hygiene concerns.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All 16 workflows were analyzed with no untrusted checkout or script-injection findings, but all 112 action references are unpinned and a high-confidence template-injection finding plus a high-confidence adhoc-package finding remain. The low-confidence cache findings are hygiene concerns only.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-738628 @quasar/app-vite is vulnerable to Exposure of Sensitive Information in versions 0.0.1 - 3.2.0.	0.0.1 - 3.2.0	Medium
AIKIDO-2026-625157 @quasar/app-vite is vulnerable to Incorrect Permission Assignment for Critical Resource in versions 0.0.1 - 3.2.0.	0.0.1 - 3.2.0	Medium
AIKIDO-2026-135012 @quasar/app-vite is vulnerable to Cross-Site Scripting (XSS) in versions 0.0.1 - 3.2.0.	0.0.1 - 3.2.0	Medium
AIKIDO-2026-204881 @quasar/app-vite is vulnerable to Path Traversal in versions 3.1.0 - 3.2.0.	3.1.0 - 3.2.0	Medium
AIKIDO-2026-552145 @quasar/app-vite is vulnerable to Path Traversal in versions 1.0.0 - 3.2.0.	1.0.0 - 3.2.0	Medium