This package contains utilities and helpers for handling Lexical text.
93%
Total Score
healthy
Healthy: active releases, broad project activity, and strong provenance outweigh workflow pinning gaps.
Version 0.52.0 is not prerelease, although 90% of recent versions were prereleases; this warrants modest caution around versioning expectations.
All 13 workflows were analyzed with no untrusted checkout or script-injection findings, but all 16 action references are unpinned and two workflows grant top-level write access; the high-confidence template-injection findings remain hygiene concerns because no dangerous trigger or sink was reported.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lexical Version 0.52.0 | — | — |
@lexical/internal Version 0.52.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.