vue-i18n

Internationalization plugin for Vue.js

Latest 11.4.14

NPM

92%

Total Score

healthy

Frequent releases and active contributors show this is a well-maintained, transparently published package.

Are you affected? Scan for Free

Health Score Breakdown

Workflow audit

All eight workflows were analyzed, all 40 action references are pinned, and no untrusted checkout or script injection was found. A high-confidence template-injection finding is a workflow hygiene concern; the two low-confidence cache-poisoning findings carry limited weight.

Vulnerabilities

Title	Versions	Severity
CVE-2025-53892 vue-i18n is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 9.0.0 - 9.14.5, 10.0.0 - 10.0.8 and 11.0.0 - 11.1.10.	9.0.0 - 9.14.510.0.0 - 10.0.811.0.0 - 11.1.10	Medium

Package versions

Maintainers

kazupon

Direct Dependencies

Dependency	Last Release	Score
@intlify/shared Version 11.4.14	—	—
@vue/devtools-api Version ^6.5.0	—	—
@intlify/core-base Version 11.4.14	—	—
@intlify/devtools-types Version 11.4.14	—	—