@ckeditor/ckeditor5-core
The core architecture of CKEditor 5 – the best browser-based rich text editor.
92%
Total Score
healthy
Long-running releases and active organization-backed development outweigh the minor package-identity and version-metadata cautions.
Health Score Breakdown
The package has no attestation, so artifact provenance is less independently verifiable; however, it identifies CircleCI as the trusted publisher and uses staged publishing false, leaving a transparency gap rather than a severe health risk.
The repository name does not match the package and its README does not mention the exact package name, which warrants caution about package-to-repository identity; the package is also presented as part of the broader CKEditor 5 project.
The assessed release is marked as a stable major and not a prerelease, but the collected latest_version is 48.5.2 while the assessed version is 49.0.0, creating a metadata consistency caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 es-toolkit Version 1.52.0 | — | — |
@ckeditor/ckeditor5-ui Version 49.0.0 | — | — |
@ckeditor/ckeditor5-utils Version 49.0.0 | — | — |
@ckeditor/ckeditor5-engine Version 49.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 9 years ago
- Unpacked Size
- 1.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.