npm package report
Is @vitejs/plugin-vue safe?
Checked against the XYZ decision brain: known-malicious corpus, advisories, commit-level findings, dependencies and provenance.
npm packagelast checked 2026-09-19
@vitejs/plugin-vue · verdict ALLOW · no known risk
0.6/10
XYZ SCORE
SUMMARY
Verdict ALLOW · 6 graph-tracked dependencies · provenance: verified (sigstore)
All signals clearclearOK
No known-malicious match, advisory, commit-level finding or anomaly.
debug@^4.3.1clean
hash-sum@^2.0.0clean
@jridgewell/gen-mapping@^0.3.1clean
@jridgewell/trace-mapping@^0.3.10clean
@rolldown/pluginutils@1.0.0-beta.9clean
rollup@^2.35.1clean
PACKAGE @vitejs/plugin-vueECOSYSTEM npmDECISION ALLOW
Package facts
Weekly downloads
33.1M
Centrality tier
tier 1
Build provenance
verified (sigstore)
Direct dependencies
6
Baked snapshot · run a live check for the current verdict · browse all packages