@ckeditor/ckeditor5-link
Link feature for CKEditor 5.
93%
Total Score
healthy
Active organization-backed project with 672 releases in the last year and 23 active contributors; no deprecation or archive warning.
Health Score Breakdown
No build attestation is provided, although the package identifies CircleCI as a trusted publisher. The missing attestation limits release transparency without indicating abandonment.
The repository name does not match the package name and its README does not mention this package, which creates a small ownership-transparency concern. The package is part of an organization-owned monorepo, which partly explains the mismatch but does not remove the missing mention.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2018-11093 @ckeditor/ckeditor5-link is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.3.0 - 10.0.1. | 0.3.0 - 10.0.1 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 es-toolkit Version 1.52.0 | — | — |
@ckeditor/ckeditor5-ui Version 49.0.0 | — | — |
@ckeditor/ckeditor5-core Version 49.0.0 | — | — |
@ckeditor/ckeditor5-enter Version 49.0.0 | — | — |
@ckeditor/ckeditor5-icons Version 49.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 9 years ago
- Unpacked Size
- 0.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.