HTML language support for the CodeMirror code editor
73%
Total Score
50
100
75
50
No build attestation, trusted publisher identity, or staged publishing evidence is present, so consumers have less verifiable assurance about how this release was produced.
Nine runtime dependencies, including several related CodeMirror and Lezer packages, create a meaningful transitive maintenance surface for this editor integration library.
A prepare install-time script adds execution during installation, increasing supply-chain and installation complexity even though no dangerous behavior is shown here.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@lezer/css Version ^1.1.0 | — | — |
@lezer/html Version ^1.3.12 | — | — |
@lezer/common Version ^1.0.0 | — | — |
@codemirror/view Version ^6.17.0 | — | — |
@codemirror/state Version ^6.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.