@codemirror/commands
Collection of editing commands for the CodeMirror code editor
82%
Total Score
50
100
100
75
50
Health Score Breakdown
No build attestation, trusted publisher identity, or staged publishing is present. That reduces release transparency, although the stable release history provides some compensating evidence.
A prepare install-time script is present, which adds some installation and reproducibility risk because package installation may execute project-defined work. No other lifecycle scripts were reported to compound that concern.
Only one registry account has publish access. This is not proof of poor maintenance, especially given the strong release history, but it leaves limited apparent publishing redundancy.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @lezer/common Version ^1.1.0 | — | — |
@codemirror/view Version ^6.27.0 | — | — |
@codemirror/state Version ^6.7.0 | — | — |
@codemirror/language Version ^6.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 26 days ago
- Created
- 5 years ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.