@tiptap/pm
prosemirror wrapper package for tiptap
82%
Total Score
healthy
A high-confidence workflow template warning and 19 unpinned actions are the main concerns.
Health Score Breakdown
Four of six publishing accounts use the primary tiptap.dev domain, but _bdbch (bdbch.com) and svenadlung (ueber.io) are outside-domain accounts. The clear company-backed publishing group and organization ownership compensate for this account-hygiene concern.
All 19 analyzed action references are unpinned, and publish.yml has a high-confidence template-injection finding plus a low-confidence hygiene finding for installing a package outside a lockfile. There are no untrusted checkouts or script-injection findings, so this is workflow hygiene risk rather than a severe release-health failure.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 prosemirror-view Version ^1.42.6 | — | — |
prosemirror-model Version ^1.25.12 | — | — |
prosemirror-state Version ^1.4.4 | — | — |
prosemirror-keymap Version ^1.2.3 | — | — |
prosemirror-tables Version ^1.8.5 | — | — |
Weekly Downloads
Info
- Last Published
- 1 day ago
- Created
- 3 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.