npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of vue, generated . This is the latest read-only snapshot.
Run your own audit →

Audit of vue

Re-run this audit
Tracking daily next

Progress over time

Strong trust
28.7% (33) staged or trusted
Any trust
29.6% (34) incl. provenance
No trust signal
70.4% (81) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/98/279/59/8
  1. ... [viewing]
    34/115 any trust
    1. [viewing]
  2. 0/0 any trust
  3. 34/115 any trust
  4. 34/115 any trust
  5. 34/115 any trust
  6. 34/115 any trust
  7. 0/0 any trust
  8. ...
    34/115 any trust
  9. 34/115 any trust
  10. ...
    34/115 any trust
  11. 0/0 any trust
  12. 34/115 any trust
  13. 34/115 any trust
  14. 34/115 any trust
  15. 34/115 any trust
  16. 34/115 any trust
  17. 34/115 any trust
  18. 34/115 any trust
  19. ...
    34/115 any trust
  20. 34/115 any trust
In scope
115
Staged publish
3
Trusted publisher
30
Provenance only
1
No trust signal
81
Deprecated latest
1
115 packages · click a column to sort
Package trust level report
@vue/test-utils2.5.0trusted publisherGitHub Actions4,321,622
vue3.5.42trusted publisherGitHub Actions13,835,385
@vue/compiler-sfc3.5.42trusted publisherGitHub Actions19,967,295
@vue/runtime-dom3.5.42trusted publisherGitHub Actions12,334,292
@vue/shared3.5.42trusted publisherGitHub Actions18,592,038
@vue/server-renderer3.5.42trusted publisherGitHub Actions12,358,818
@vue/runtime-core3.5.42trusted publisherGitHub Actions12,343,068
@vue/reactivity3.5.42trusted publisherGitHub Actions10,403,975
@vue/compiler-ssr3.5.42trusted publisherGitHub Actions19,033,010
@vue/compiler-dom3.5.42trusted publisherGitHub Actions22,009,823
@vue/compiler-core3.5.42trusted publisherGitHub Actions17,096,403
@vue/compat3.5.42trusted publisherGitHub Actions140,845
@vue/language-core3.3.11trusted publisherGitHub Actions9,068,465
@vue/language-server3.3.11trusted publisherGitHub Actions66,123
@vue/language-service3.3.11trusted publisherGitHub Actions69,096
@vue/typescript-plugin3.3.11trusted publisherGitHub Actions75,794
@vue/language-plugin-pug3.3.11trusted publisherGitHub Actions46,411
@vue/devtools8.2.1trusted publisherGitHub Actions19,714
@vue/devtools-electron8.2.1trusted publisherGitHub Actions11,796
@vue/devtools-applet8.2.1trusted publisherGitHub Actions10,013
@vue/devtools-api8.2.1trusted publisherGitHub Actions11,896,803
@vue/devtools-core8.2.1trusted publisherGitHub Actions2,084,254
@vue/devtools-ui8.2.1trusted publisherGitHub Actions10,011
@vue/devtools-kit8.2.1trusted publisherGitHub Actions7,171,818
@vue/devtools-shared8.2.1trusted publisherGitHub Actions7,112,458
create-vue3.23.0trusted publisherGitHub Actions13,944
@vue/apollo-ssr4.2.3noneakryum748
@vue/babel-plugin-resolve-type3.0.0staged publishGitHub Actions3,453,791
@vue/babel-plugin-jsx3.0.0staged publishGitHub Actions3,610,920
@vue/babel-helper-vue-transform-on3.0.0staged publishGitHub Actions2,775,613
@vue/eslint-config-typescript14.9.0trusted publisherGitHub Actions1,665,764
@vue/repl4.7.2trusted publisherGitHub Actions11,013
@vue/theme2.4.0nonebrc-dd2,762
@vue/tsconfig0.9.1trusted publisherGitHub Actions1,554,968
@vue/create-eslint-config0.14.2trusted publisherGitHub Actions177
@vue/cli5.0.9nonesoda33,439
@vue/cli-ui5.0.9nonesoda33,496
@vue/cli-service5.0.9nonesoda374,293
@vue/cli-plugin-babel5.0.9nonesoda325,699
@vue/cli-plugin-unit-mocha5.0.9nonesoda18,080
@vue/cli-plugin-pwa5.0.9nonesoda33,866
@vue/cli-plugin-e2e-webdriverio5.0.9nonesoda439
@vue/cli-plugin-e2e-cypress5.0.9nonesoda53,906
@vue/cli-plugin-unit-jest5.0.9nonesoda176,994
@vue/cli-plugin-typescript5.0.9nonesoda168,688
@vue/cli-plugin-e2e-nightwatch5.0.9nonesoda14,363
@vue/cli-plugin-router5.0.9nonesoda440,406
@vue/cli-plugin-eslint5.0.9nonesoda340,199
@vue/cli-ui-addon-widgets5.0.9nonesoda32,951
@vue/cli-ui-addon-webpack5.0.9nonesoda33,084
@vue/babel-preset-app5.0.9nonesoda478,556
@vue/cli-test-utils5.0.9nonesoda670
@vue/cli-shared-utils5.0.9nonesoda599,377
@vue/cli-overlay5.0.9nonesoda471,694
@vue/cli-init5.0.9nonesoda450
@vue/cli-plugin-vuex5.0.9nonesoda439,329
@vue/eslint-config-standard-with-typescript9.2.0nonesoda5,936
@vue/eslint-config-standard9.0.1nonesoda100,950
@vue/apollo-components4.2.2noneakryum23,569
@vue/apollo-util4.2.2noneakryum6,638
@vue/apollo-option4.2.2noneakryum71,017
@vue/apollo-composable4.2.2noneakryum116,405
@vue/compiler-vapor0.0.0noneyyx99080311,400
@vue/runtime-vapor0.0.0noneyyx99080318,053
@vue/eslint-config-prettier10.2.0provenancesoda1,036,206
@vue/compiler-vue22.7.16noneyyx9908031,962,901
@vue/compat-canary3.20240701.0noneyyx990803126
@vue/canary3.20240701.0noneyyx990803115
@vue/shared-canary3.20240701.0noneyyx990803116
@vue/server-renderer-canary3.20240701.0noneyyx990803114
@vue/runtime-dom-canary3.20240701.0noneyyx990803118
@vue/runtime-core-canary3.20240701.0noneyyx990803116
@vue/reactivity-canary3.20240701.0noneyyx990803119
@vue/compiler-ssr-canary3.20240701.0noneyyx990803116
@vue/compiler-sfc-canary3.20240701.0noneyyx990803119
@vue/compiler-dom-canary3.20240701.0noneyyx990803115
@vue/compiler-core-canary3.20240701.0noneyyx990803115
@vue/consolidate1.0.0noneyyx99080323,336
@vue/devtools-schema7.0.14nonewebfansplz717
@vue/eslint-config-airbnb-with-typescript8.0.0nonesoda10,803
@vue/eslint-config-airbnb8.0.0nonesoda77,508
@vue/reactivity-transform-canary3.20231225.0noneyyx99080358
vue-template-compiler2.7.16noneyyx9908032,077,522
vue-server-renderer2.7.16noneyyx990803210,901
@vue/reactivity-transform3.3.13noneyyx9908031,099,253
@vue/typescript1.8.20nonejohnsoncodehk139,284
@vue/vue3-jest29.2.6nonelmiller1990207,390
@vue/vue2-jest29.2.6nonelmiller1990124,877
@vue/composition-api1.7.2noneantfu93,829
@vue/babel-preset-jsx1.4.0nonesoda468,918
@vue/babel-sugar-v-model1.4.0nonesoda469,156
@vue/babel-sugar-v-on1.4.0nonesoda602,220
@vue/babel-plugin-transform-vue-jsx1.4.0nonesoda475,815
@vue/babel-sugar-composition-api-render-instance1.4.0nonesoda317,767
@vue/babel-helper-vue-jsx-merge-props1.4.0nonesoda478,478
@vue/babel-sugar-functional-vue1.4.0nonesoda601,516
@vue/babel-sugar-inject-h1.4.0nonesoda341,344
@vue/babel-sugar-composition-api-inject-h1.4.0nonesoda442,396
@vue/cli-service-global4.5.19nonesoda552
@vue/ref-transform3.2.24noneyyx99080331,274DEPRECATED
@vue/server-test-utils1.3.0nonelmiller19905,247
@vue/component-compiler-utils3.3.0nonesoda1,058,743
@vue/cli-plugin-webpack-45.0.0-beta.2nonesoda13
@vue/ui0.12.5noneakryum477
@vue/component-compiler4.2.4noneznck55,199
@vue/web-component-wrapper1.3.0nonesoda264,631
@vue/preload-webpack-plugin2.0.0nonesoda175,608
@vue/lit0.0.2noneyyx9908038
vue-jest3.0.7nonelmiller1990236,889
@vue/dev-server0.2.0noneyyx99080322
@vue/benchmark-agent0.0.0noneakryum3
@vue/cli-upgrade3.12.1nonesoda52
@vue/conventional-changelog0.1.1noneakryum87
@vue/eslint-plugin4.2.0noneyyx990803169
@vue/publish-test1.0.1noneyyx9908037