vite-patterns
Provides patterns and best practices for configuring and optimizing Vite build tool projects, enhancing development efficiency.
Install this skill
or
70/100
Security score
The vite-patterns skill was audited on May 18, 2026 and we found 14 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 317
Template literal with variable interpolation in command context
SourceSKILL.md
| 317 | fileName: (format) => `my-lib.${format}.js`, |
medium line 14
Access to .env file
SourceSKILL.md
| 14 | - Setting up environment variables or `.env` files |
medium line 147
Access to .env file
SourceSKILL.md
| 147 | Vite loads `.env`, `.env.local`, `.env.[mode]`, and `.env.[mode].local` in that order (later overrides earlier); `*.local` files are gitignored and meant for local secrets. |
low line 154
Access to .env file
SourceSKILL.md
| 154 | import.meta.env.VITE_API_URL // string |
low line 155
Access to .env file
SourceSKILL.md
| 155 | import.meta.env.MODE // 'development' | 'production' | custom |
low line 156
Access to .env file
SourceSKILL.md
| 156 | import.meta.env.BASE_URL // base config value |
low line 157
Access to .env file
SourceSKILL.md
| 157 | import.meta.env.DEV // boolean |
low line 158
Access to .env file
SourceSKILL.md
| 158 | import.meta.env.PROD // boolean |
low line 159
Access to .env file
SourceSKILL.md
| 159 | import.meta.env.SSR // boolean |
medium line 209
Access to .env file
SourceSKILL.md
| 209 | - `.env.local`, `.env.*.local` — local secret overrides |
low line 123
External URL reference
SourceSKILL.md
| 123 | For full plugin API, see [vite.dev/guide/api-plugin](https://vite.dev/guide/api-plugin). Use `vite-plugin-inspect` during development to debug the transform pipeline. |
low line 219
External URL reference
SourceSKILL.md
| 219 | '/foo': 'http://localhost:4567', // string shorthand |
low line 222
External URL reference
SourceSKILL.md
| 222 | target: 'http://localhost:8080', |
low line 302
External URL reference
SourceSKILL.md
| 302 | When `vite dev` feels slow, start with `vite --profile`, interact with the app, then press `p+enter` to save a `.cpuprofile`. Load it in [Speedscope](https://www.speedscope.app) to find which plugins |
Scanned on May 18, 2026
View Security DashboardGitHub Stars 189.4K
Rate this skill
Categorydevelopment
UpdatedJune 10, 2026
affaan-m/everything-claude-code