npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of nuxt, generated . This is a read-only snapshot.
Run your own audit →

Audit of nuxt

Re-run this audit
Tracking daily next

Progress over time

Strong trust
33.8% (53) staged or trusted
Any trust
48.4% (76) incl. provenance
No trust signal
51.6% (81) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/98/248/309/810/610/18
  1. ...
    76/157 any trust
  2. 76/157 any trust
  3. 76/157 any trust
  4. 76/156 any trust
  5. ...
    76/156 any trust
  6. ...
    74/155 any trust
  7. 74/155 any trust
  8. ...
    74/155 any trust
  9. ...
    74/155 any trust
  10. ...
    74/155 any trust
  11. ...
    74/155 any trust
  12. ...
    74/155 any trust
  13. ...
    74/155 any trust
  14. 74/155 any trust
  15. 74/154 any trust
  16. 74/154 any trust
  17. 74/154 any trust
  18. ...
    74/154 any trust
  19. ...
    74/154 any trust
  20. 74/154 any trust
  21. ... [viewing]
    73/153 any trust
    1. [viewing]
  22. ...
    73/152 any trust
  23. 73/152 any trust
  24. 73/152 any trust
  25. 73/152 any trust
  26. 73/152 any trust
  27. 73/152 any trust
  28. 73/152 any trust
  29. 73/152 any trust
  30. 73/152 any trust
  31. 73/152 any trust
  32. ...
    73/152 any trust
  33. 73/152 any trust
  34. 72/150 any trust
In scope
153
Staged publish
6
Trusted publisher
44
Provenance only
23
No trust signal
80
Deprecated latest
12
153 packages · click a column to sort
Package trust level report
@nuxt/vite-server0.0.0nonedanielroe?—
@nuxt/cli-nightly4.0.0-20260829-200936-84e7673trusted publisherGitHub Actions16,662—
nuxi-nightly4.0.0-20260829-200924-84e7673trusted publisherGitHub Actions7,737—
create-nuxt-nightly4.0.0-20260829-200916-84e7673trusted publisherGitHub Actions7,876—
@nuxt/kit-nightly4.6.0-29800190.654d2aadtrusted publisherGitHub Actions18,954—
@nuxt/docs-nightly4.6.0-29800190.654d2aadtrusted publisherGitHub Actions8,002—
@nuxt/webpack-builder-nightly4.6.0-29800190.654d2aadtrusted publisherGitHub Actions8,172—
@nuxt/vite-builder-nightly4.6.0-29800190.654d2aadtrusted publisherGitHub Actions15,929—
@nuxt/schema-nightly4.6.0-29800190.654d2aadtrusted publisherGitHub Actions15,981—
@nuxt/rspack-builder-nightly4.6.0-29800190.654d2aadtrusted publisherGitHub Actions7,913—
nuxt-nightly4.6.0-29800190.654d2aadtrusted publisherGitHub Actions17,962—
@nuxt/nitro-server-nightly4.6.0-29800190.654d2aadtrusted publisherGitHub Actions15,469—
@nuxt/bridge-schema-edge3.6.1-29800110.cbd1a86trusted publisherGitHub Actions3,826—
@nuxt/bridge-edge3.6.1-29800110.cbd1a86trusted publisherGitHub Actions4,831—
@nuxt/test-utils4.2.0staged publishGitHub Actions700,516—
@nuxt/test-utils-nightly4.2.0-20260827-150728-fa9d90ftrusted publisherGitHub Actions750—
@nuxt/content3.16.0nonefarnabaz170,757—
@nuxt/icon2.5.1trusted publisherGitHub Actions735,208—
@nuxt/devtools3.4.2trusted publisherGitHub Actions1,916,256—
@nuxt/devtools-kit3.4.2trusted publisherGitHub Actions3,188,096—
@nuxt/devtools-ui-kit3.4.2trusted publisherGitHub Actions27,795—
@nuxt/devtools-wizard3.4.2trusted publisherGitHub Actions1,878,481—
@nuxt/devtools-nightly4.0.0-alpha.15-29789254.7d12d3btrusted publisherGitHub Actions888—
@nuxt/devtools-assets4.0.0-alpha.15trusted publisherGitHub Actions107—
@nuxt/fonts-nightly0.14.1-20260821-195624-8c3dd7ftrusted publisherGitHub Actions65—
@nuxt/ui4.11.0nonebenjamincanac551,957—
@nuxt/scripts1.3.8trusted publisherGitHub Actions246,506—
@nuxt/devtools-ui-kit-nightly4.0.0-alpha.11-29786538.b33a2adtrusted publisherGitHub Actions79DEPRECATED
@nuxt/devtools-kit-nightly4.0.0-alpha.11-29786538.b33a2adtrusted publisherGitHub Actions703—
@nuxt/modules0.6.0-768f60trusted publisherGitHub Actions218—
@nuxt/scripts-cli2.0.0-beta.1noneharlan_zw48—
@nuxt/image-nightly2.1.1-20260806-131032-bcdd8edtrusted publisherGitHub Actions734—
@nuxt/eslint1.17.0trusted publisherGitHub Actions743,073—
@nuxt/eslint-config1.17.0trusted publisherGitHub Actions894,960—
@nuxt/eslint-plugin1.17.0trusted publisherGitHub Actions875,296—
@nuxt/schema4.5.2trusted publisherGitHub Actions2,640,652—
@nuxt/nitro-server4.5.2trusted publisherGitHub Actions1,555,567—
@nuxt/vite-builder4.5.2trusted publisherGitHub Actions1,912,217—
nuxt4.5.2trusted publisherGitHub Actions2,010,897—
@nuxt/kit4.5.2trusted publisherGitHub Actions7,261,938—
@nuxt/docs4.5.2trusted publisherGitHub Actions730—
@nuxt/webpack-builder4.5.2trusted publisherGitHub Actions1,665—
@nuxt/rspack-builder4.5.2trusted publisherGitHub Actions571—
@nuxt/image2.1.0staged publishGitHub Actions498,110—
@nuxt/module-builder1.0.3staged publishGitHub Actions100,494—
@nuxt/hints1.1.4trusted publisherGitHub Actions46,878—
@nuxt/cli3.37.0staged publishGitHub Actions1,830,220—
nuxi3.37.0staged publishGitHub Actions208,503—
create-nuxt3.37.0staged publishGitHub Actions4,312—
@nuxt/telemetry2.8.0trusted publisherGitHub Actions1,888,218—
@nuxt/devtools-wizard-nightly3.2.4-29562025.ae68d3btrusted publisherGitHub Actions300—
@nuxt/fonts0.14.0trusted publisherGitHub Actions715,089—
@nuxt/a11y1.0.0-alpha.1noneGitHub Actions23,629—
@nuxt/ui-pro3.3.7nonebenjamincanac16,518—
@nuxt/bridge-schema3.6.1trusted publisherGitHub Actions5,980—
@nuxt/bridge3.6.1trusted publisherGitHub Actions6,043—
@nuxt/ui-edge2.21.0-29023856.23d9b51anonebenjamincanac587DEPRECATED
@nuxt/ui-pro-edge1.7.0-29022833.7be6163anonebenjamincanac143DEPRECATED
@nuxt/scripts-nightly0.10.6-20250305-224215-b494283noneharlan_zw6—
create-nuxt-app6.0.0nonedanielroe3,678—
create-nuxt-app-nightly0.0.0nonedanielroe2—
@nuxt/opencollective0.4.1nonedanielroe4,802,829—
@nuxt/devtools-wizard-edge1.6.3-28887216.798f141provenancenuxt.bot367—
@nuxt/devtools-ui-kit-edge1.6.3-28887216.798f141provenancenuxt.bot13—
@nuxt/devtools-kit-edge1.6.3-28887216.798f141provenancenuxt.bot375—
@nuxt/devtools-edge1.6.3-28887216.798f141provenancenuxt.bot478—
@nuxt/content-edge2.13.4-28887017.d8792efnonenuxt.bot252—
@nuxt/webpack-edge2.18.2-28661769.e265ef3provenancenuxtbot5,173—
@nuxt/vue-renderer-edge2.18.2-28661769.e265ef3provenancenuxtbot5,144—
@nuxt/vue-app-edge2.18.2-28661769.e265ef3provenancenuxtbot5,157—
@nuxt/utils-edge2.18.2-28661769.e265ef3provenancenuxtbot5,465—
@nuxt/types-edge2.18.2-28661769.e265ef3provenancenuxtbot899—
@nuxt/server-edge2.18.2-28661769.e265ef3provenancenuxtbot5,223—
@nuxt/generator-edge2.18.2-28661769.e265ef3provenancenuxtbot5,074—
@nuxt/core-edge2.18.2-28661769.e265ef3provenancenuxtbot5,409DEPRECATED
@nuxt/config-edge2.18.2-28661769.e265ef3provenancenuxtbot5,439—
@nuxt/cli-edge2.18.2-28661769.e265ef3provenancenuxtbot5,650DEPRECATED
@nuxt/builder-edge2.18.2-28661769.e265ef3provenancenuxtbot5,239DEPRECATED
@nuxt/babel-preset-app-edge2.18.2-28661769.e265ef3provenancenuxtbot5,216—
@nuxt/webpack2.18.1nonedanielroe126,764—
@nuxt/vue-renderer2.18.1nonedanielroe127,415—
@nuxt/vue-app2.18.1nonedanielroe128,018—
@nuxt/utils2.18.1nonedanielroe140,572—
@nuxt/types2.18.1nonedanielroe130,049—
@nuxt/server2.18.1nonedanielroe127,404—
@nuxt/generator2.18.1nonedanielroe126,148—
@nuxt/core2.18.1nonedanielroe127,319—
@nuxt/config2.18.1nonedanielroe128,670—
@nuxt/builder2.18.1nonedanielroe126,503—
@nuxt/babel-preset-app2.18.1nonedanielroe130,140—
@nuxt/ui-templates1.3.4nonedanielroe118,066—
@nuxt/ui-assets0.2.1nonedanielroe22—
@nuxt/ui-templates-edge1.3.1-28534474.bc8c845nonenuxt.bot391—
@nuxt/ui-assets-edge0.2.0-28534474.bc8c845nonenuxt.bot13—
@nuxt/assets-nightly0.0.0nonedanielroe5—
@nuxt/third-parties-nightly0.0.0nonedanielroe5—
@nuxt/third-party-capital-nightly0.0.0nonedanielroe4—
@nuxt/assets0.0.0nonedanielroe4—
@nuxt/third-party-capital0.0.0nonedanielroe4—
@nuxt/third-parties0.0.0nonedanielroe3—
@nuxt/image-edge1.3.0-28493895.369b747provenancenuxt.bot5,746—
@nuxt/examples-ui0.0.2noneatinux100—
@nuxt/friendly-errors-webpack-plugin2.6.0nonedanielroe312,274—
@nuxt/typescript-build3.0.2nonerchl51,652—
@nuxt/typescript-runtime3.0.2nonerchl13,021—
@nuxt/webpack-builder-edge3.8.0-28284309.b3d3d7f4provenancenuxt.bot1,604—
@nuxt/vite-builder-edge3.8.0-28284309.b3d3d7f4provenancenuxt.bot4,565—
@nuxt/test-utils-edge3.8.0-28284309.b3d3d7f4provenancenuxt.bot1,431—
@nuxt/schema-edge3.8.0-28284309.b3d3d7f4provenancenuxt.bot6,631—
nuxt33.8.0-28284309.b3d3d7f4provenancenuxt.bot4,148DEPRECATED
@nuxt/kit-edge3.8.0-28284309.b3d3d7f4provenancenuxt.bot7,421—
nuxt-now0.0.1nonedanielroe3—
nuxt-nuxt0.0.0-alpha.0noneantfu2—
nuxi-canary0.0.1nonedanielroe1—
nuxt-canary0.0.1nonedanielroe2—
@nuxt/devalue2.0.2nonedanielroe1,877,659—
cna-template5.0.0noneclarkdo3,572—
eslint-plugin-nuxt4.0.0noneclarkdo119,809—
@nuxt/nitro-edge3.0.0-27488831.368610enonenuxt.bot2,093—
@nuxt/content-theme-docs0.11.1nonepi0215—
@nuxt/design0.1.5nonedanielroe765—
@nuxt/nitro0.10.0nonepi0265—
@nuxt/components2.2.1nonepi0120,737—
@nuxt/pages-edge0.3.0-27145039.c2e96d0nonenuxt.bot14—
@nuxt/meta-edge0.1.0-27145039.c2e96d0nonenuxt.bot11—
@nuxt/global-imports-edge0.1.0-27145039.c2e96d0nonenuxt.bot8—
@nuxt/component-discovery-edge0.2.0-27145039.c2e96d0nonenuxt.bot12—
@nuxt/app-edge0.5.0-27145039.c2e96d0nonenuxt.bot54DEPRECATED
@nuxt/component-discovery0.2.0nonepi029—
@nuxt/pages0.3.0nonepi035—
@nuxt/app0.5.0nonepi046—
@nuxt/loading-screen2.0.4nonepi0127,503—
@nuxt/postcss81.1.3nonepi032,663—
@nuxt/http0.6.4nonepi05,053—
@nuxt/un0.1.1nonepi020—
@nuxt/sigma0.0.78nonepi019DEPRECATED
@nuxt/ufo0.5.4nonepi01,693DEPRECATED
@nuxt/h20.2.0nonepi014—
@nuxt/theme0.0.2noneatinux126—
@nuxt/serverless0.0.42nonepi05—
@nuxt/integrations0.5.0-c88682nonenuxt.bot7—
@nuxt/static1.0.0nonepi04,469DEPRECATED
@nuxt/blueprints0.1.0-alpha.1nonepimlie20—
@nuxt/markdown0.0.21nonegalvez86—
@nuxt/press0.0.1-beta.4nonegalvez15—
@nuxt/typescript-edge2.9.0-26065450.b73115e5nonenuxt.bot22—
@nuxt/station0.3.1nonepi05—
@nuxt/dashboard-ui0.2.0nonepi05—
@nuxt/dashboard-api0.1.0noneatinux5—
@nuxt/typescript2.8.1nonepi01,451—
@nuxt/experiment-auto-plugins0.1.0noneatinux6—
@nuxt/common-edge2.4.0-25757024.c432ec4enonenuxt.bot47DEPRECATED
@nuxt/common2.3.4nonepi0208—