@lexical/plain-text

Dependency profilecaution

Six runtime dependencies are closely related Lexical packages, which is reasonable for this editor extension but increases reliance on coordinated package releases.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, creating some uncertainty about package-to-repository traceability; the organization-owned monorepo context partly explains the mismatch.

Version stabilitycaution

Version 0.52.0 is not a prerelease, but 90% of recent versions are prereleases, so the release line has some stability uncertainty.

Workflow auditcaution

All 13 workflows were analyzed, but all 16 action references are unpinned and three high-confidence template-injection findings were reported; 11 workflows use read-only permissions, and no untrusted checkout or script-injection sink was found.