91%
Total Score
healthy
Active releases and a maintained, security-tooled repository support this package.
The linked monorepo neither matches the package name nor mentions it in its README, leaving some uncertainty that this repository directly represents the package rather than only its parent project.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10387 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. @milkdown/transformer is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 7.5.5 - 7.13.1. | 7.5.5 - 7.13.1 | Low |
| Dependency | Last Release | Score |
|---|---|---|
remark Version ^15.0.1 | — | — |
unified Version ^11.0.3 | — | — |
@milkdown/prose Version 7.22.3 | — | — |
@milkdown/exception Version 7.22.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.