@tiptap/extension-bubble-menu
bubble-menu extension for tiptap
86%
Total Score
healthy
Active maintenance and strong project backing outweigh workflow pinning and package-repository transparency concerns.
Health Score Breakdown
Four of six publishing accounts use the tiptap.dev domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts, creating a modest account-hygiene concern rather than evidence of limited maintenance capacity.
The repository name does not match the package name and its README does not mention this package. This is plausible for a monorepo, but the collected evidence does not directly establish the package-to-repository link.
All three workflows were analyzed without untrusted checkouts or script-injection findings, but all 19 action references are unpinned. The high-confidence template-injection and low-confidence adhoc-package findings are workflow hygiene concerns, though no dangerous trigger or sink corroborates them.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @floating-ui/dom Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 12 days ago
- Created
- 5 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.