@tiptap/extension-list-item
The repository is actively maintained, with 223 commits and 21 active contributors in three months, backed by regular releases. Two outside-domain publishing accounts and unpinned workflow actions warrant modest caution, while the package has types, licensing, provenance, tests, and security policy.
88%
Total Score
90
100
94
83
100
Health Score Breakdown
Four of six publishing accounts use the organization’s tiptap.dev domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts. Organization backing makes this an account-hygiene concern rather than evidence of limited maintenance capacity.
The repository name differs from the package name, which is normal for a monorepo, but its README does not mention this package. That leaves some uncertainty about the package-to-repository linkage.
All three workflows were analyzed with no untrusted checkout or script-injection trigger findings, but all 19 action references are unpinned and the publish workflow installs a package outside a lockfile. The high-confidence template-injection finding is a hygiene concern here because no dangerous trigger was reported.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 5 days ago
- Created
- 5 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.