Package Health

@next/mdx

Use [MDX](https://github.com/mdx-js/mdx) with [Next.js](https://github.com/vercel/next.js)

Latest 16.4.2NPMNPM

91%

Total Score

healthy

Long-lived, highly active project with verified publishing and broad contributor activity; workflow hygiene and package-to-repository linkage add modest uncerta

Health Score Breakdown

Repo package mentioncaution

The repository name does not match the package and its README does not mention @next/mdx, so the package-to-repository relationship is less transparent even though a monorepo can legitimately host subpackages.

Workflow auditcaution

All 29 workflows were analyzed with no failed files, and only 1 of 139 action uses is unpinned. High-confidence template-injection findings, inherited secrets, and seven workflows with top-level write permissions are workflow-hygiene concerns, although no untrusted checkout or script-injection sink was found.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
source-map
Version ^0.7.0
—
—

Weekly Downloads

Info

Last Published
7 hours ago
Created
7 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform