highlight extension for tiptap
89%
Total Score
healthy
Active organization-backed maintenance is strong, with workflow pinning and package-account hygiene as the main reservations.
Four of six publishing accounts use the organization domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) publish from outside domains; this is an account-hygiene caution, not evidence of limited maintenance capacity.
The linked repository name does not match the package name and its README does not mention @tiptap/extension-highlight, leaving some uncertainty about package-to-repository linkage even though a monorepo structure can explain the mismatch.
All 19 analyzed action references are unpinned, which weakens workflow reproducibility. The high-confidence template-injection finding and low-confidence adhoc-package finding are hygiene concerns here because no untrusted checkout or dangerous trigger was observed.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.