This package contains Headless helpers and functionality for Lexical.
88%
Total Score
healthy
Healthy release backed by frequent publishing, active contributors, and verified build provenance.
The repository name does not match the package and its README does not mention it, creating some uncertainty about the package-to-repository mapping; the monorepo context makes a name mismatch alone ordinary, but the missing README mention remains a caution.
The current release is not a prerelease, but 90% of recent releases were prereleases, which adds some version-selection uncertainty.
All 13 workflows were analyzed with no untrusted checkout or script-injection trigger, but all 16 action references are unpinned and high-confidence template-injection findings were reported; two workflows also grant top-level write permissions.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lexical Version 0.52.0 | — | — |
happy-dom Version ^20.9.0 | — | — |
@lexical/internal Version 0.52.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.