lovable-tagger
Vite plugins for component tagging and Tailwind config extraction
65%
Total Score
caution
Usable with caveats: unusually rapid releases and limited build provenance reduce confidence in this release.
Health Score Breakdown
No build attestation or staged-publishing evidence was provided. The trusted publisher identity is GitHub, but the lack of verifiable provenance leaves the published artifact harder to connect to its source build.
A README is included, which is useful for a Vite plugin, but its installation example uses “@test/plugin” rather than the assessed package name. The missing tests and changelog are normal for a published compiled artifact.
The package has existed for about 1 year 11 months, with 61 releases and 45 in the last year. A median interval of about 2 hours indicates unusually rapid publishing, which can make release quality harder to assess.
Version 1.3.5 is a stable-major, non-prerelease release, but 80% of recent releases were prereleases. That pattern weakens confidence in a consistently stable release process.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 esbuild Version ^0.25.0 | — | — |
tailwindcss Version ^3.4.17 | — | — |
Weekly Downloads
Info
- Last Published
- 16 days ago
- Created
- 1 year ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.