Package Health

@lexical/history

This package contains selection history helpers for Lexical.

Latest 0.52.0NPMNPM

86%

Total Score

healthy

Healthy: active Facebook-backed project with frequent releases and commits outweighs workflow and repository-identity hygiene concerns.

Health Score Breakdown

Repo package mentioncaution

The repository name does not match the package and its README does not mention @lexical/history, so the package-to-repository relationship is less transparent even though it is consistent with a monorepo subpackage.

Version stabilitycaution

Version 0.52.0 is not a prerelease, but 90% of recent releases were prereleases and the package remains below major version 1, adding some compatibility uncertainty.

Workflow auditcaution

All 13 workflows were analyzed, with no untrusted checkouts or script-injection findings, but all 16 action references are unpinned and two workflows grant top-level write permissions. High-confidence template-injection findings are also present, though no dangerous trigger-and-sink combination was reported.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
lexical
Version 0.52.0
—
—
@lexical/utils
Version 0.52.0
—
—
@lexical/extension
Version 0.52.0
—
—

Weekly Downloads

Info

Last Published
13 days ago
Created
4 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform