<a href="https://github.com/vuejs/language-tools/blob/m
86%
Total Score
healthy
Active organization-backed project with strong release activity; workflow references are all unpinned and publishing uses a long-lived token.
The project uses TypeScript, Vitest, and npm scripts, showing a real build and test toolchain. No security scanning tools were detected, leaving a minor hygiene gap.
No repository security policy was found, which reduces vulnerability-reporting transparency, though the active organization-backed project provides compensating maintenance evidence.
All six workflows were analyzed with no untrusted checkouts or script injection, but all 28 action references are unpinned and the release workflow uses trusted publishing with a long-lived token; one workflow also has top-level write permissions.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.