nx

Dependency profilecaution

Nx declares 97 runtime dependencies, which increases dependency surface and maintenance complexity, but this is consistent with a broad build and workspace CLI.

Lifecycle scriptscaution

A postinstall script runs during installation, adding install-time behavior that deserves awareness even though no other provided signal shows it is unsafe.

Maintainerscaution

Four of eight publish-access accounts use the nrwl.io domain, consistent with organization ownership. The consumer accounts meeroslav (gmail.com), juristr (gmail.com), vsavkin (gmail.com), and outside-domain account jameshenry (henry.sc) are account-hygiene cautions, not evidence of limited maintenance capacity.

Workflow auditcaution

All 13 workflows were analyzed with no untrusted checkout or script-injection findings, and all 81 action references are pinned. However, high-confidence adhoc-package findings show several workflow steps install packages outside a lockfile, and high-confidence template-injection findings remain hygiene concerns.