{"package":"@depup/nuxt","ecosystem":"npm","latest_version":"4.5.2-depup.17","description":"Nuxt is a free and open-source framework with an intuitive and extendable way to create type-safe, performant and production-grade full-stack web applications and websites with Vue.js. (with updated dependencies)","license":"MIT","license_risk":"permissive","commercial_use_notes":"Permissive: commercial closed-source use OK; preserve the copyright notice.","homepage":"https://nuxt.com","repository":"https://github.com/nuxt/nuxt","downloads_weekly":549,"health":{"score":40,"risk":"high","breakdown":{"maintenance":25,"popularity":3,"security":15,"maturity":12,"community":12},"deprecated":false,"max_score":100},"vulnerabilities":{"count":1,"critical":1,"high":0,"medium":0,"low":0,"details":[{"vuln_id":"MAL-2026-13625","severity":"critical","summary":"Malicious code in @depup/nuxt (npm)","affected_versions":"=4.5.0-depup.0","fixed_version":null,"source":"osv","published_at":"2026-08-07T17:25:02Z"}]},"versions":{"latest":"4.5.2-depup.17","total_count":42,"recent":["4.5.1-depup.3","4.5.1-depup.4","4.5.2-depup.0","4.5.2-depup.1","4.5.2-depup.2","4.5.2-depup.3","4.5.2-depup.4","4.5.2-depup.5","4.5.2-depup.6","4.5.2-depup.7","4.5.2-depup.8","4.5.2-depup.9","4.5.2-depup.10","4.5.2-depup.11","4.5.2-depup.12","4.5.2-depup.13","4.5.2-depup.14","4.5.2-depup.15","4.5.2-depup.16","4.5.2-depup.17"]},"metadata":{"deprecated":false,"deprecated_message":null,"maintainers_count":1,"first_published":"2026-01-13T00:34:09.647Z","last_published":"2026-09-22T08:15:53.237Z","dependencies_count":59,"dependencies":["ufo","vue","defu","errx","jiti","mlly","nypm","rou3","klona","ohash","pathe","scule","unctx","ignore","ofetch","undici","unhead","verkit","compatx","consola","devalue","exsolve","impound","nanotar","nostics","std-env","untyped","chokidar","fnv1a-64","hookable","knitwork","uncrypto","unimport","unplugin","@nuxt/cli","@nuxt/kit","cookie-es","on-change","picomatch","pkg-types","ultrahtml","unrouting","@dxup/nuxt","oxc-walker","tinyglobby","vue-router","@unhead/vue","@vue/shared","@nuxt/schema","magic-string","@nuxt/devtools","@nuxt/telemetry","object-identity","rolldown-string","perfect-debounce","@nuxt/nitro-server","@nuxt/vite-builder","escape-string-regexp","vue-component-type-helpers"]},"github_stats":{"stars":60151,"forks":5589,"open_issues":894,"is_archived":false,"pushed_at":"2026-04-30T08:14:50+00:00"},"bundle":null,"typescript":{"score":10,"has_types":true,"types_source":"bundled","types_package":null},"known_issues":{"bugs_count":0,"bugs_severity":{},"status_breakdown":{},"link":null,"scope":"none"},"historical_compromise":null,"recommendation":{"action":"do_not_use","issues":["Moderate health score (40/100) — verify manually","1 critical vulnerabilities"],"use_version":"4.5.2-depup.17","version_hint":null,"summary":"@depup/nuxt has critical vulnerabilities — do not use"},"version_scoped":null,"_meta":{"endpoint":"check","tier":"full","philosophy":"DepScope is free. Use the cheapest endpoint that answers your real question.","cheaper_alternatives":[{"endpoint":"/api/exists/npm/%40depup%2Fnuxt","tokens_estimated":12,"use_when":"you only need to know if the package exists (hallucination guard)"},{"endpoint":"/api/health/npm/%40depup%2Fnuxt","tokens_estimated":80,"use_when":"you only need a 0-100 score for go/no-go (>=70 = safe)"},{"endpoint":"/api/prompt/npm/%40depup%2Fnuxt","tokens_estimated":280,"use_when":"you want a plain-text LLM-friendly brief instead of JSON"},{"endpoint":"POST /api/check_bulk","tokens_estimated":60,"use_when":"you have 5+ packages to check; sends one round-trip instead of N"}],"docs":"https://depscope.dev/integrate"},"_cache":"hit","_response_ms":0}