NuxtLabs

France · nuxt.com · 4 vendors

NuxtLabs is a software company that creates open-source frameworks, primarily Nuxt and Nitro, to improve the developer experience for building high-performance, full-stack web applications. Founded in 2017, the company focuses on providing tools and an ecosystem for Vue.js developers. NuxtLabs was acquired by Vercel in July 2025.

Resilience scores

Technology vendors

Services catalogue

2 services in catalogue across 1 category; runs on 4 sub-vendors.

Insights

Last updated 2026-08-06 · revision 2

4 direct vendors, 127 subvendors

Direct vendors by controlling owner country (sample)

Subvendors by controlling owner country (sample)

Migration Readiness: 9/10

Assessed by AI based on technology stack characteristics (cloud-native vs legacy, containerization, microservices), regulatory environment, data residency requirements, financial stability, and vendor lock-in risks. The score ranges from 0-10, where higher scores indicate better readiness for technology migration.

NuxtLabs exhibits exceptionally high migration readiness due to its highly modern, flexible, and cloud-native tech stack. Key technologies like Nitro, an agnostic server engine, enable "zero-config deployment to Node.js, Cloudflare Workers, Deno, Bun, AWS Lambda, Vercel, Netlify, and more," demonstrating inherent portability across diverse environments. The use of Docker for development environments, along with SSR/SSG and edge computing, further enhances the modularity and deployability of their applications. The extensive Nuxt Module Ecosystem also promotes a decoupled architecture. The primary challenge to migration readiness is the potential for vendor lock-in, stemming from the high concentration of services from US-based vendors. While the underlying technology is highly portable, the current operational reliance on a limited set of providers (especially Vercel) could complicate a full migration effort. The absence of data on regulatory environment, data residency requirements, and financial stability (to fund a migration) also introduces unknowns that could impact readiness.

Compliance

8 in-scope frameworks identified; showing 3.

Open Source Software Supply Chain Security — Assessment Required

As a major open-source framework with 6.9M monthly downloads and use by Fortune 500 companies, NuxtLabs is a critical node in the software supply chain. Supply chain attacks on npm packages and JavaScript frameworks have increased significantly. Risk is Medium because: (1) a compromised Nuxt package could affect millions of downstream applications; (2) NuxtLabs has published security-focused releases (e.g., v4.5.1 blog post titled 'v4-5-security' was observed); (3) no formal SSDF compliance or OpenSSF Scorecard evidence was found.

Evidence: https://nuxt.com/blog/v4-5-security, https://csrc.nist.gov/Projects/ssdf, https://openssf.org/community/openssf-best-practices-badge-program/

French Data Protection Law — Assessment Required

As a French company, NuxtLabs is directly subject to the French Data Protection Act (Loi n° 78-17 du 6 janvier 1978, as amended to align with GDPR). This law is enforced by the CNIL, which has been one of the most active EU DPAs in issuing fines and enforcement actions. The CNIL has fined major tech companies (Google €150M, Facebook €60M, Amazon €35M) and actively investigates French-based companies. Risk is High due to CNIL's enforcement track record and NuxtLabs' data processing activities at scale.

Evidence: https://nuxt.com, https://www.cnil.fr/en/home, https://www.legifrance.gouv.fr/loda/id/JORFTEXT000000886460

EU Digital Services Act — Assessment Required

The DSA applies to intermediary services including hosting services and online platforms. NuxtLabs operates nuxt.com as a platform hosting user-generated content (modules, templates, showcase submissions, community content). However, NuxtLabs is likely a 'small enterprise' or 'micro-enterprise' under DSA definitions (fewer than 50 employees and annual turnover under €10M), which would exempt it from most DSA obligations beyond basic requirements. Risk is Low pending size threshold confirmation.

Evidence: https://nuxt.com, https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32022R2065, https://digital-strategy.ec.europa.eu/en/policies/digital-services-act-package

Financials

Three-year financials

Financial Resilience Score: 6/10

NuxtLabs SAS is a small, bootstrapped French SME that stewards the open-source Nuxt.js framework. Its financial resilience is supported by a strong brand and community moat, with Nuxt being one of the leading Vue.js meta-frameworks, and a roster of blue-chip reference customers including LVMH brands, Dassault Systèmes, NASA JPL, and Google Ventures. The company benefits from diversified funding streams including corporate sponsorships from major infrastructure vendors (Vercel, Google, Neon, GitHub, Cloudflare, JetBrains), commercial products like NuxtHub, and enterprise support contracts. Its low fixed-cost base as a small, remote engineering team further supports resilience. However, as a bootstrapped SME with an estimated 15-25 employees, cash reserves are likely modest relative to enterprise SaaS peers, making the company sensitive to sponsorship downturns or customer churn. Monetization tension is evident from the September 2025 decision to make Nuxt UI Pro free with Nuxt UI v4, removing a paid product line and shifting commercial burden to NuxtHub and enterprise support. Framework competition from Next.js, Remix, SvelteKit, Astro, and Qwik remains a structural risk, along with key-person dependency on a small number of core maintainers. The reported July 2025 acquisition by Vercel, if confirmed, would materially strengthen the company's financial position by providing access to Vercel's balance sheet (following its $250M Series E at a $3.25B valuation in 2024) and distribution infrastructure.

Key strengths: Strong brand and community moat as leading Vue.js meta-framework, Blue-chip reference customers (LVMH, Dassault Systèmes, NASA JPL, Google Ventures), Diversified funding streams (sponsorships, commercial products, enterprise support), Low fixed-cost base with small remote engineering team, Reported July 2025 acquisition by Vercel provides parent company backing, Large open-source adoption: ~6.9M monthly npm downloads, ~60.7K GitHub stars

Risk factors: Small absolute scale with modest cash reserves as bootstrapped SME, Monetization tension: Nuxt UI Pro made free in September 2025, Framework competition from Next.js, Remix, SvelteKit, Astro, and Qwik, Nuxt's fate tied to Vue.js adoption trajectory, Key-person dependency on small number of core maintainers (Chopin brothers, Daniel Roe, Pooya Parsa, Anthony Fu), Post-acquisition integration risk regarding community perception and independence

Revenue by geography

Revenue by product/service

Workforce by country

Signed-in users can see whether their own company is exposed to this vendor's disruption, plus the full sub-vendor list and country breakdowns, every in-scope compliance framework plus gaps and next steps, and alerts when any of it changes.

View the full interactive report