@tiptap/extension-typography
Frequent releases and 21 active contributors provide strong maintenance capacity, with tests, security policy, and npm provenance supporting trust. Pinning every workflow action and a publish-workflow audit finding leave some supply-chain hygiene work.
84%
Total Score
90
100
94
83
100
Health Score Breakdown
Four of six publish accounts use the organization domain, while _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts; this is a minor account-hygiene caution, moderated by organization backing.
The repository name does not match the package and its README does not mention the package, which is a caution under the package-ownership check, although the organization-backed repository and package tree indicate a broader project structure.
All three workflows were analyzed with no untrusted checkout or script-injection findings, but all 19 action references are unpinned; the publish workflow also has high-confidence template-injection and low-confidence-impact adhoc-package findings, so workflow hygiene warrants caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 5 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.