npmreport

npm gives maintainers mechanisms to verifiably establish how a package was published.

Staged publishing
Published through npm's staged flow, prepared and reviewed before it goes live. npm docs ↗
Trusted publisher
Published from CI over OIDC, with no long-lived npm token to leak or steal. npm docs ↗
Provenance
A signed link from the published package back to the exact source commit and build. npm docs ↗
None
No verifiable signal. The release rests on the maintainer's account and token alone, so a compromise there can ship malware unnoticed.

In the summary, staged publishing and trusted publisher both count as strong trust; provenance is a weaker positive; none is the one to check.

Audit of vue, generated . This is a read-only snapshot.
Run your own audit →

Audit of vue

Re-run this audit
Tracking daily next

Progress over time

Strong trust
0% (0) staged or trusted
Any trust
0% (0) incl. provenance
No trust signal
0% (0) no trust metadata detected
Strong trust Any trust No trust signal
0%50%100%8/98/279/59/1510/310/1610/24
  1. 0/0 any trust
  2. 35/117 any trust
  3. [viewing]
    35/117 any trust
  4. 34/116 any trust
  5. ...
    34/116 any trust
  6. 34/116 any trust
  7. 34/116 any trust
  8. 34/116 any trust
  9. 0/0 any trust
  10. 0/0 any trust
  11. 34/116 any trust
  12. 34/116 any trust
  13. ...
    34/115 any trust
  14. 34/115 any trust
  15. ...
    34/115 any trust
  16. 0/0 any trust
  17. ...
    34/115 any trust
  18. 0/0 any trust
  19. 34/115 any trust
  20. ...
    34/115 any trust
  21. 34/115 any trust
  22. 34/115 any trust
  23. 0/0 any trust
  24. 34/115 any trust
  25. ...
    34/115 any trust
  26. 34/115 any trust
  27. 0/0 any trust
  28. ...
    34/115 any trust
  29. 0/0 any trust
  30. 34/115 any trust
  31. 34/115 any trust
  32. 34/115 any trust
  33. 34/115 any trust
  34. 0/0 any trust
  35. ...
    34/115 any trust
  36. 34/115 any trust
  37. ...
    34/115 any trust
  38. 0/0 any trust
  39. 34/115 any trust
  40. 34/115 any trust
  41. 34/115 any trust
  42. 34/115 any trust
  43. 34/115 any trust
  44. 34/115 any trust
  45. 34/115 any trust
  46. ...
    34/115 any trust
  47. 34/115 any trust
In scope
117
Staged publish
3
Trusted publisher
31
Provenance only
1
No trust signal
82
Deprecated latest
1
117 packages · click a column to sort
Package trust level report
@vue/content-mapper4.0.0-alpha.0trusted publisherGitHub Actions?—
@vue/devtools-agent9.0.0-rc.1nonewebfansplz2,625—
@vue/shared3.5.44trusted publisherGitHub Actions18,252,739—
@vue/compiler-core3.5.44trusted publisherGitHub Actions16,737,074—
@vue/compat3.5.44trusted publisherGitHub Actions90,177—
@vue/runtime-core3.5.44trusted publisherGitHub Actions10,215,172—
@vue/reactivity3.5.44trusted publisherGitHub Actions10,959,105—
@vue/compiler-sfc3.5.44trusted publisherGitHub Actions15,180,812—
@vue/server-renderer3.5.44trusted publisherGitHub Actions10,132,560—
vue3.5.44trusted publisherGitHub Actions11,038,721—
@vue/runtime-dom3.5.44trusted publisherGitHub Actions10,201,902—
@vue/compiler-dom3.5.44trusted publisherGitHub Actions16,659,083—
@vue/compiler-ssr3.5.44trusted publisherGitHub Actions14,665,649—
@vue/language-server3.3.13trusted publisherGitHub Actions39,085—
@vue/typescript-plugin3.3.13trusted publisherGitHub Actions58,313—
@vue/language-core3.3.13trusted publisherGitHub Actions6,572,220—
@vue/language-plugin-pug3.3.13trusted publisherGitHub Actions36,611—
@vue/language-service3.3.13trusted publisherGitHub Actions41,107—
@vue/test-utils2.5.1trusted publisherGitHub Actions3,179,954—
create-vue3.24.0trusted publisherGitHub Actions11,313—
@vue/devtools8.2.1trusted publisherGitHub Actions8,911—
@vue/devtools-electron8.2.1trusted publisherGitHub Actions5,341—
@vue/devtools-applet8.2.1trusted publisherGitHub Actions5,506—
@vue/devtools-api8.2.1trusted publisherGitHub Actions8,899,316—
@vue/devtools-core8.2.1trusted publisherGitHub Actions1,987,119—
@vue/devtools-ui8.2.1trusted publisherGitHub Actions5,460—
@vue/devtools-kit8.2.1trusted publisherGitHub Actions5,440,704—
@vue/devtools-shared8.2.1trusted publisherGitHub Actions5,396,305—
@vue/apollo-ssr4.2.3noneakryum514—
@vue/babel-plugin-resolve-type3.0.0staged publishGitHub Actions2,533,832—
@vue/babel-plugin-jsx3.0.0staged publishGitHub Actions2,637,832—
@vue/babel-helper-vue-transform-on3.0.0staged publishGitHub Actions2,633,686—
@vue/eslint-config-typescript14.9.0trusted publisherGitHub Actions975,531—
@vue/repl4.7.2trusted publisherGitHub Actions7,939—
@vue/theme2.4.0nonebrc-dd512—
@vue/tsconfig0.9.1trusted publisherGitHub Actions1,036,628—
@vue/create-eslint-config0.14.2trusted publisherGitHub Actions129—
@vue/cli5.0.9nonesoda17,876—
@vue/cli-ui5.0.9nonesoda17,876—
@vue/cli-service5.0.9nonesoda279,762—
@vue/cli-plugin-babel5.0.9nonesoda242,078—
@vue/cli-plugin-unit-mocha5.0.9nonesoda13,168—
@vue/cli-plugin-pwa5.0.9nonesoda29,201—
@vue/cli-plugin-e2e-webdriverio5.0.9nonesoda373—
@vue/cli-plugin-e2e-cypress5.0.9nonesoda23,054—
@vue/cli-plugin-unit-jest5.0.9nonesoda87,733—
@vue/cli-plugin-typescript5.0.9nonesoda81,777—
@vue/cli-plugin-e2e-nightwatch5.0.9nonesoda6,990—
@vue/cli-plugin-router5.0.9nonesoda251,332—
@vue/cli-plugin-eslint5.0.9nonesoda197,539—
@vue/cli-ui-addon-widgets5.0.9nonesoda17,704—
@vue/cli-ui-addon-webpack5.0.9nonesoda17,745—
@vue/babel-preset-app5.0.9nonesoda286,005—
@vue/cli-test-utils5.0.9nonesoda187—
@vue/cli-shared-utils5.0.9nonesoda326,571—
@vue/cli-overlay5.0.9nonesoda275,946—
@vue/cli-init5.0.9nonesoda307—
@vue/cli-plugin-vuex5.0.9nonesoda250,553—
@vue/eslint-config-standard-with-typescript9.2.0nonesoda2,124—
@vue/eslint-config-standard9.0.1nonesoda60,283—
@vue/apollo-components4.2.2noneakryum17,651—
@vue/apollo-util4.2.2noneakryum6,263—
@vue/apollo-option4.2.2noneakryum47,448—
@vue/apollo-composable4.2.2noneakryum79,039—
@vue/compiler-vapor0.0.0noneyyx99080330,210—
@vue/runtime-vapor0.0.0noneyyx99080329,814—
@vue/eslint-config-prettier10.2.0provenancesoda606,964—
@vue/compiler-vue22.7.16noneyyx9908032,288,674—
@vue/compat-canary3.20240701.0noneyyx99080311—
@vue/canary3.20240701.0noneyyx9908033—
@vue/shared-canary3.20240701.0noneyyx990803192—
@vue/server-renderer-canary3.20240701.0noneyyx9908032—
@vue/runtime-dom-canary3.20240701.0noneyyx99080328—
@vue/runtime-core-canary3.20240701.0noneyyx99080320—
@vue/reactivity-canary3.20240701.0noneyyx99080321—
@vue/compiler-ssr-canary3.20240701.0noneyyx9908035—
@vue/compiler-sfc-canary3.20240701.0noneyyx9908034—
@vue/compiler-dom-canary3.20240701.0noneyyx99080322—
@vue/compiler-core-canary3.20240701.0noneyyx990803115—
@vue/consolidate1.0.0noneyyx99080314,160—
@vue/devtools-schema7.0.14nonewebfansplz270—
@vue/eslint-config-airbnb-with-typescript8.0.0nonesoda6,683—
@vue/eslint-config-airbnb8.0.0nonesoda58,734—
@vue/reactivity-transform-canary3.20231225.0noneyyx990803110—
vue-template-compiler2.7.16noneyyx9908031,230,632—
vue-server-renderer2.7.16noneyyx990803139,027—
@vue/reactivity-transform3.3.13noneyyx990803743,952—
@vue/typescript1.8.20nonejohnsoncodehk72,216—
@vue/vue3-jest29.2.6nonelmiller1990125,811—
@vue/vue2-jest29.2.6nonelmiller199070,674—
@vue/composition-api1.7.2noneantfu58,434—
@vue/babel-preset-jsx1.4.0nonesoda378,871—
@vue/babel-sugar-v-model1.4.0nonesoda378,553—
@vue/babel-sugar-v-on1.4.0nonesoda378,572—
@vue/babel-plugin-transform-vue-jsx1.4.0nonesoda379,475—
@vue/babel-sugar-composition-api-render-instance1.4.0nonesoda345,598—
@vue/babel-helper-vue-jsx-merge-props1.4.0nonesoda384,345—
@vue/babel-sugar-functional-vue1.4.0nonesoda378,290—
@vue/babel-sugar-inject-h1.4.0nonesoda378,300—
@vue/babel-sugar-composition-api-inject-h1.4.0nonesoda345,631—
@vue/cli-service-global4.5.19nonesoda541—
@vue/ref-transform3.2.24noneyyx99080328,442DEPRECATED
@vue/server-test-utils1.3.0nonelmiller19904,816—
@vue/component-compiler-utils3.3.0nonesoda667,739—
@vue/cli-plugin-webpack-45.0.0-beta.2nonesoda5—
@vue/ui0.12.5noneakryum792—
@vue/component-compiler4.2.4noneznck58,281—
@vue/web-component-wrapper1.3.0nonesoda266,452—
@vue/preload-webpack-plugin2.0.0nonesoda140,770—
@vue/lit0.0.2noneyyx9908035—
vue-jest3.0.7nonelmiller1990134,223—
@vue/dev-server0.2.0noneyyx9908036—
@vue/benchmark-agent0.0.0noneakryum4—
@vue/cli-upgrade3.12.1nonesoda114—
@vue/conventional-changelog0.1.1noneakryum40—
@vue/eslint-plugin4.2.0noneyyx990803151—
@vue/publish-test1.0.1noneyyx9908031—