vite-plugin-vue-tracer

Maintainerscaution

Only one account has registry publish access, which is a modest publishing concentration. Repository activity from four recent contributors provides some compensation for that registry-level concentration.

Repo toolingcaution

The project uses TypeScript, Vite, unbuild, and npm scripts, indicating a structured build. No security scanning tools were detected, leaving a minor hygiene gap.

Security policycaution

The repository has no security policy, which makes vulnerability-reporting expectations less transparent. This is a documentation gap rather than evidence of abandonment.

Workflow auditcaution

All three workflows were analyzed successfully with no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all three action references are unpinned, creating a supply-chain hygiene gap.