Package Health

@tiptap/markdown

markdown parser and serializer for tiptap

Latest 3.32.0NPMNPM

82%

Total Score

healthy

Frequent releases and active maintainers outweigh unpinned workflow actions, weak package linkage, and a few outside publisher accounts.

Health Score Breakdown

Maintainerscaution

Four of six publishing accounts use the primary tiptap.dev domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts and add modest account-hygiene risk despite clear organizational backing.

Repo package mentioncaution

The repository name does not match @tiptap/markdown and its README does not mention the package, so the linkage is less transparent; the monorepo context makes a name mismatch alone less concerning.

Workflow auditcaution

All three workflows were analyzed without untrusted checkouts or script-injection findings, but all 19 action references are unpinned and a high-confidence template-injection finding plus ad hoc package installation remain workflow hygiene concerns.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
marked
Version ^17.0.1
—
—

Weekly Downloads

Info

Last Published
2 days ago
Created
1 year ago
Unpacked Size
0.5 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform