@ckeditor/ckeditor5-real-time-collaboration
A set of CKEditor 5 features enabling real-time collaboration within the editor using CKEditor Cloud Services.
88%
Total Score
healthy
Active organization-backed project with strong release and repository activity; package-to-repository identification and build provenance remain limited.
Health Score Breakdown
No build attestation is present, leaving publication provenance less transparent despite the trusted publisher identifier being recorded.
The repository name does not match the package and its README does not mention the package, which leaves package-to-repository ownership less explicit; the monorepo structure partly explains the name mismatch.
The assessed version is a stable, non-prerelease major version. The reported latest version is 48.5.2, which conflicts with the assessed 49.0.0 release data and slightly reduces consistency.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10108 @ckeditor/ckeditor5-real-time-collaboration is vulnerable to Cross-site Scripting in versions 41.3.0 - 44.2.0. | 41.3.0 - 44.2.0 | High |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 es-toolkit Version 1.52.0 | — | — |
@ckeditor/ckeditor5-ui Version 49.0.0 | — | — |
@ckeditor/ckeditor5-core Version 49.0.0 | — | — |
@ckeditor/ckeditor5-utils Version 49.0.0 | — | — |
@ckeditor/ckeditor5-engine Version 49.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 7 years ago
- Unpacked Size
- 0.7 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.