Use [MDX](https://github.com/mdx-js/mdx) with [Next.js](https://github.com/vercel/next.js)
91%
Total Score
healthy
Long-lived, highly active project with verified publishing and broad contributor activity; workflow hygiene and package-to-repository linkage add modest uncerta
The repository name does not match the package and its README does not mention @next/mdx, so the package-to-repository relationship is less transparent even though a monorepo can legitimately host subpackages.
All 29 workflows were analyzed with no failed files, and only 1 of 139 action uses is unpinned. High-confidence template-injection findings, inherited secrets, and seven workflows with top-level write permissions are workflow-hygiene concerns, although no untrusted checkout or script-injection sink was found.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
source-map Version ^0.7.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.