@vitejs/plugin-vue

Repo toolingcaution

The project uses Vite, Vitest, TypeScript, and npm scripts, and the repository has tests. No dedicated security-scanning tool was detected, but a security policy and workflow audit provide some compensation.

Type declarationscaution

The indicator reports no type declarations, which is a consumer-facing gap for a TypeScript-oriented build plugin. The package tree shows a declaration-named distribution file, but the collected type signal does not confirm usable declarations.

Workflow auditcaution

All 9 workflows were analyzed with no untrusted checkout or script-injection findings, and all 21 action references are pinned. High-confidence findings include ad hoc package installation during publishing and trusted-publishing workflow behavior; the cache findings are low-confidence hygiene concerns.