lezer-based HTML grammar
20%
Total Score
67
100
83
75
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the concern raised by its archived status.
The linked repository is archived, a severe abandonment risk even though it was pushed recently; archived projects are not a dependable basis for a new dependency.
A prepare lifecycle script runs during installation, which adds build-time complexity and deserves review, though no harmful behavior is shown by this signal alone.
The repository uses Rollup and npm scripts for builds, but no security scanning tools were detected; the missing scanning is a modest transparency gap.
No repository security policy was detected, leaving vulnerability-reporting guidance unspecified; this is a hygiene gap rather than evidence of abandonment by itself.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@lezer/lr Version ^1.0.0 | — | — |
@lezer/common Version ^1.2.0 | — | — |
@lezer/highlight Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.