Vite as Node.js runtime
58%
Total Score
caution
Usable with caveats: its mission is finished and new projects are directed to Vite’s built-in replacement.
The repository recorded 0 commits and 0 active maintainers in the last three months, which is a meaningful maintenance and abandonment concern despite recent registry releases.
The package includes a substantial README and release notes for version 6.0.0, and the repository has tests. However, the README states that vite-node has finished its mission and recommends Vite’s built-in solution for new projects.
The repository uses TypeScript, Vitest, Vite, and npm scripts for builds and tests. It reports no security scanning tools, which is a modest hygiene gap.
The repository has no security policy, leaving vulnerability-reporting expectations undocumented.
Both workflows were fully analyzed with no dangerous triggers, untrusted checkouts, script injections, or audit findings. All 7 action references are unpinned, which is a supply-chain hygiene weakness.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
cac Version ^7.0.0 | — | — |
obug Version ^2.1.1 | — | — |
vite Version ^8.0.0 | — | — |
pathe Version ^2.0.3 | — | — |
es-module-lexer Version ^2.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.