@vue/shared
internal utils shared across @vue packages
91%
Total Score
healthy
Active, well-backed package with verified publishing and only limited workflow hygiene concerns.
Health Score Breakdown
The repository name does not match this subpackage and its README does not mention it, creating a small ownership-transparency concern; the organization-backed monorepo context partly offsets that concern.
All 8 workflows were analyzed, all 40 action references are pinned, and there are no untrusted checkouts or script injections. High-confidence template-injection and ad hoc-package findings warrant limited workflow hygiene caution; the low-confidence cache findings carry little weight.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-624585 @vue/shared is vulnerable to Cross-Site Scripting (XSS) in versions 3.0.0 - 3.5.39. | 3.0.0 - 3.5.39 | Medium |
Package versions
Maintainers
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 8 hours ago
- Created
- 6 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.