@lexical/code-core

This package contains the base functionality code blocks for Lexical, it is a transitional package for internal use while the @lexical/code API is cleaned up.

Latest 0.52.0

NPM

82%

Total Score

healthy

Healthy overall, backed by rapid releases and active organization-maintained development.

Health Score Breakdown

Repo package mention

The repository name does not match the package and its README does not mention @lexical/code-core, so the package-to-repository relationship is less explicit even though the repository is a plausible monorepo source.

Version stability

Version 0.52.0 is not a stable major release and 90% of recent releases are prereleases, so API stability may be limited despite the release being non-prerelease.

Workflow audit

All 13 workflows were analyzed, but all 16 action references are unpinned and two workflows grant top-level write permissions. Three high-confidence template-injection findings are hygiene concerns here because no pull_request_target, workflow_run, untrusted checkout, or script-injection trigger was observed.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

Dependency	Last Release	Score
lexical Version 0.52.0	—	—
@lexical/html Version 0.52.0	—	—
@lexical/utils Version 0.52.0	—	—
@lexical/internal Version 0.52.0	—	—
@lexical/extension Version 0.52.0	—	—