Package Health

@milkdown/transformer

Latest 7.22.3NPMNPM

91%

Total Score

healthy

Active releases and a maintained, security-tooled repository support this package.

Are you affected? Scan for Free

Health Score Breakdown

Repo package mentioncaution

The linked monorepo neither matches the package name nor mentions it in its README, leaving some uncertainty that this repository directly represents the package rather than only its parent project.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10387 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
@milkdown/transformer is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 7.5.5 - 7.13.1.
7.5.5 - 7.13.1
Low

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
remark
Version ^15.0.1
—
—
unified
Version ^11.0.3
—
—
@milkdown/prose
Version 7.22.3
—
—
@milkdown/exception
Version 7.22.3
—
—

Weekly Downloads

Info

Last Published
2 days ago
Created
4 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform