@milkdown/preset-commonmark
88%
Total Score
healthy
Active releases and commits support this package, with a concentrated contributor base and weak repository package identification.
Health Score Breakdown
Ten contributors were active, but the top contributor made about 70% of recent commits. Organization backing partly compensates, though ownership remains concentrated.
The repository name does not match this package and its README does not mention the package, so the linkage is less transparent. The organization-backed monorepo context reduces but does not eliminate that concern.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2026-508387 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @milkdown/preset-commonmark is vulnerable to Cross-Site Scripting (XSS) in versions 7.0.0 - 7.21.2. | 7.0.0 - 7.21.2 | Medium |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @milkdown/ctx Version 7.22.3 | — | — |
@milkdown/core Version 7.22.3 | — | — |
@milkdown/prose Version 7.22.3 | — | — |
@milkdown/utils Version 7.22.3 | — | — |
unist-util-visit Version ^5.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 days ago
- Created
- 5 years ago
- Unpacked Size
- 0.5 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.