Gathering detailed insights and metrics for nuxt
Gathering detailed insights and metrics for nuxt
Installations
npm install nuxtDeveloper
Developer Guide
BETA
Module System
ESM
Min. Node Version
^14.18.0 || >=16.10.0
Typescript Support
Yes
Node Version
20.18.0
NPM Version
10.8.2
Statistics
55,104 Stars
6,946 Commits
5,042 Forks
793 Watching
65 Branches
800 Contributors
Updated on 29 Nov 2024
Languages
TypeScript (96.19%)
HTML (1.98%)
JavaScript (0.91%)
Vue (0.68%)
Shell (0.2%)
Dockerfile (0.04%)
Total Downloads
Cumulative downloads
Total Downloads
118,249,715
Last day
-6%
128,890
Compared to previous day
Last week
-0.5%
729,932
Compared to previous week
Last month
1.7%
3,142,186
Compared to previous month
Last year
23.2%
33,161,589
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
64
@nuxt/devalue@nuxt/devtools@nuxt/telemetry@unhead/dom@unhead/shared@unhead/ssr@unhead/vue@vue/sharedacornc12chokidarcompatxconsolacookie-esdefudestrdevalueerrxesbuildescape-string-regexpestree-walkerglobbyh3hookableignoreimpoundjitiklonaknitworkmagic-stringmllynanotarnitropacknuxinypmofetchohashpatheperfect-debouncepkg-typesradix3sculesemverstd-envstrip-literaltinyglobbyufoultrahtmluncryptounctxunenvunheadunimportunpluginunplugin-vue-routerunstorageuntypedvuevue-bundle-renderervue-devtools-stubvue-router@nuxt/schema@nuxt/kit@nuxt/vite-builder
Peer Dependencies
2
Versions
Nuxt
Nuxt is a free and open-source framework with an intuitive and extendable way to create type-safe, performant and production-grade full-stack web applications and websites with Vue.js.
It provides a number of features that make it easy to build fast, SEO-friendly, and scalable web applications, including:
- Server-side rendering, Static Site Generation, Hybrid Rendering and Edge-Side Rendering
- Automatic routing with code-splitting and pre-fetching
- Data fetching and state management
- SEO Optimization and Meta tags definition
- Auto imports of components, composables and utils
- TypeScript with zero configuration
- Go fullstack with our server/ directory
- Extensible with 200+ modules
- Deployment to a variety of hosting platforms
- ...and much more 🚀
Table of Contents
- 🚀 Getting Started
- 💻 Vue Development
- 📖 Documentation
- 🧩 Modules
- ❤️ Contribute
- 🏠 Local Development
- ⛰️ Nuxt 2
- 🛟 Professional Support
- 🔗 Follow Us
- ⚖️ License
🚀 Getting Started
Use the following command to create a new starter project. This will create a starter project with all the necessary files and dependencies:
1npx nuxi@latest init <my-project>
[!TIP] Discover also nuxt.new: Open a Nuxt starter on CodeSandbox, StackBlitz or locally to get up and running in a few seconds.
💻 Vue Development
Simple, intuitive and powerful, Nuxt lets you write Vue components in a way that makes sense. Every repetitive task is automated, so you can focus on writing your full-stack Vue application with confidence.
Example of an app.vue:
1<script setup lang="ts"> 2useSeoMeta({ 3 title: 'Meet Nuxt', 4 description: 'The Intuitive Vue Framework.' 5}) 6</script> 7 8<template> 9 <div id="app"> 10 <AppHeader /> 11 <NuxtPage /> 12 <AppFooter /> 13 </div> 14</template> 15 16<style scoped> 17#app { 18 background-color: #020420; 19 color: #00DC82; 20} 21</style>
📖 Documentation
We highly recommend you take a look at the Nuxt documentation to level up. It’s a great resource for learning more about the framework. It covers everything from getting started to advanced topics.
🧩 Modules
Discover our list of modules to supercharge your Nuxt project, created by the Nuxt team and community.
❤️ Contribute
We invite you to contribute and help improve Nuxt 💚
Here are a few ways you can get involved:
- Reporting Bugs: If you come across any bugs or issues, please check out the reporting bugs guide to learn how to submit a bug report.
- Suggestions: Have ideas to enhance Nuxt? We'd love to hear them! Check out the contribution guide to share your suggestions.
- Questions: If you have questions or need assistance, the getting help guide provides resources to help you out.
🏠 Local Development
Follow the docs to Set Up Your Local Development Environment to contribute to the framework and documentation.
🛟 Professional Support
- Technical audit & consulting: Nuxt Experts
- Custom development & more: Nuxt Agencies Partners
🔗 Follow Us
⚖️ License
Stable Version
The latest stable version of the package.
Stable Version
3.14.1592
CRITICAL
2
CRITICAL
8.8/10
Summary
Nuxt vulnerable to remote code execution via the browser when running the test locally
Affected Versions
>= 3.4.0, < 3.12.4
Patched Versions
3.12.4
CRITICAL
8.1/10
Summary
nuxt Code Injection vulnerability
Affected Versions
>= 3.4.0, < 3.4.3
Patched Versions
3.4.3
MODERATE
1
MODERATE
6.3/10
Summary
nuxt vulnerable to Cross-site Scripting in navigateTo if used after SSR
Affected Versions
< 3.12.4
Patched Versions
3.12.4
Reason
no binaries found in the repo
Reason
28 out of 28 merged PRs checked by a CI test -- score normalized to 10
Reason
project has 73 contributing companies or organizations
Details
- Info: eslint-stylistic contributor org/company found, D2Arsenal contributor org/company found, Zettlr contributor org/company found, MetridashCore contributor org/company found, webfansplz-sponsors contributor org/company found, vuejs contributor org/company found, javascript-compiler-hints contributor org/company found, localfile-link contributor org/company found, albionstatus contributor org/company found, tastejs contributor org/company found, vite-pwa contributor org/company found, JabRef contributor org/company found, krutie patel contributor org/company found, mash-up contributor org/company found, Strawbei contributor org/company found, ecosystem-ci contributor org/company found, type-challenges contributor org/company found, esbuild-kit contributor org/company found, web engineering consultant (open for inquiries) contributor org/company found, unplugin contributor org/company found, twoslashes contributor org/company found, we-dance contributor org/company found, elk-zone contributor org/company found, Tresjs contributor org/company found, unjs . @nuxt contributor org/company found, slidevjs contributor org/company found, intlify contributor org/company found, nuxtlabs contributor org/company found, knightlyjs contributor org/company found, unocss contributor org/company found, nuxt-community contributor org/company found, nuxt-contrib contributor org/company found, fse-employability contributor org/company found, jabama-co contributor org/company found, antfu-sponsors contributor org/company found, helloasso contributor org/company found, gubutler contributor org/company found, myself contributor org/company found, wintercg contributor org/company found, gridsome contributor org/company found, DescendantGG contributor org/company found, alibaba-aero contributor org/company found, lottomerkury sp. z o.o. contributor org/company found, acquiredigital contributor org/company found, wenyan-lang contributor org/company found, vitejs contributor org/company found, nuxt-modules contributor org/company found, leetchi contributor org/company found, bootstrap-vue contributor org/company found, shikijs contributor org/company found, codecember-ink contributor org/company found, mdit-vue contributor org/company found, passionatepeople contributor org/company found, windicss contributor org/company found, HelloAsso contributor org/company found, HubSpot contributor org/company found, vuejs @vueuse contributor org/company found, unjs contributor org/company found, tsperf contributor org/company found, nitrojs contributor org/company found, github-beta contributor org/company found, benevolt contributor org/company found, nuxtjs contributor org/company found, nuxt contributor org/company found, vueuse contributor org/company found, Lottomerkury contributor org/company found, diligentcorp contributor org/company found, vue-reactivity contributor org/company found, antfu-collective contributor org/company found, Developmint contributor org/company found, vue-terminal contributor org/company found, vitest-dev contributor org/company found, masters-info-nantes contributor org/company found,
Reason
no dangerous workflow patterns detected
Reason
update tool detected
Details
- Info: detected update tool: RenovateBot: renovate.json:1
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
30 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
Reason
all dependencies are pinned
Details
- Info: 52 out of 52 GitHub-owned GitHubAction dependencies pinned
- Info: 12 out of 12 third-party GitHubAction dependencies pinned
- Info: 1 out of 1 containerImage dependencies pinned
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
GitHub workflow tokens follow principle of least privilege
Details
- Warn: jobLevel 'actions' permission set to 'write': .github/workflows/cache-cleanup.yml:17
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/cache-cleanup.yml:18
- Warn: jobLevel 'contents' permission set to 'write': .github/workflows/changelog.yml:22
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/ci.yml:71
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/ci.yml:70
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/scorecards.yml:29
- Info: jobLevel 'actions' permission set to 'read': .github/workflows/scorecards.yml:30
- Info: jobLevel 'contents' permission set to 'read': .github/workflows/semantic-pull-requests.yml:15
- Info: jobLevel 'pull-requests' permission set to 'read': .github/workflows/semantic-pull-requests.yml:16
- Warn: jobLevel 'statuses' permission set to 'write': .github/workflows/semantic-pull-requests.yml:17
- Info: topLevel 'contents' permission set to 'read': .github/workflows/autofix-docs.yml:13
- Info: topLevel 'contents' permission set to 'read': .github/workflows/autofix.yml:9
- Info: found token with 'none' permissions: .github/workflows/benchmark.yml:1
- Info: found token with 'none' permissions: .github/workflows/cache-cleanup.yml:1
- Info: found token with 'none' permissions: .github/workflows/changelog.yml:1
- Info: found token with 'none' permissions: .github/workflows/ci.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/dependency-review.yml:13
- Info: found token with 'none' permissions: .github/workflows/docs-check-links.yml:1
- Info: found token with 'none' permissions: .github/workflows/docs-deploy.yml:1
- Info: found token with 'none' permissions: .github/workflows/docs.yml:1
- Info: found token with 'none' permissions: .github/workflows/label-pr.yml:1
- Info: topLevel 'contents' permission set to 'read': .github/workflows/lint-sherif.yml:19
- Info: topLevel 'contents' permission set to 'read': .github/workflows/lint-workflows.yml:19
- Info: found token with 'none' permissions: .github/workflows/notify-nuxt-bridge.yml:1
- Info: found token with 'none' permissions: .github/workflows/release.yml:1
- Info: topLevel permissions set to 'read-all': .github/workflows/scorecards.yml:18
- Info: found token with 'none' permissions: .github/workflows/semantic-pull-requests.yml:1
Reason
0 existing vulnerabilities detected
Reason
SAST tool detected but not run on all commits
Details
- Info: SAST configuration detected: CodeQL
- Warn: 20 commits out of 28 are checked with a SAST tool
Reason
Found 15/19 approved changesets -- score normalized to 7
Reason
badge detected: InProgress
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Score
8.9
/10
Last Scanned on 2024-11-28T16:34:39Z
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More