Classic editor implementation for CKEditor 5.
92%
Total Score
healthy
Active organization-backed project with 379 recent commits and 23 active maintainers outweighs minor metadata concerns.
The package has no build attestation, so release provenance is less transparent. This is a supply-chain transparency gap, but the package uses a trusted publisher identity of circleci and other project evidence is strong.
The repository name does not match this package and its README does not mention the package, which is a transparency concern. The package file tree and CKEditor organization backing make a monorepo subpackage explanation plausible, limiting the impact.
Version 49.0.0 is a stable major release and is not a prerelease. However, 95% of recent versions are prereleases, which adds a modest stability concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
es-toolkit Version 1.52.0 | — | — |
@ckeditor/ckeditor5-ui Version 49.0.0 | — | — |
@ckeditor/ckeditor5-core Version 49.0.0 | — | — |
@ckeditor/ckeditor5-utils Version 49.0.0 | — | — |
@ckeditor/ckeditor5-engine Version 49.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.