@lezer/javascript
lezer-based JavaScript grammar
78%
Total Score
healthy
Healthy: 43 releases over five years and a current stable version show sustained maintenance.
Health Score Breakdown
No build attestation, trusted publisher, or staged publishing provenance is present, so the connection between source and published artifact cannot be independently verified from this signal.
A prepare install-time script is present, which adds build or installation behavior that consumers should review rather than treating the package as entirely passive.
Registry publishing access is held by one account. This does not establish actual project activity, but it leaves limited visible publishing redundancy.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @lezer/lr Version ^1.3.0 | — | — |
@lezer/common Version ^1.2.0 | — | — |
@lezer/highlight Version ^1.1.3 | — | — |
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 5 years ago
- Unpacked Size
- 0.4 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.