Themes for CodeMirror.
78%
Total Score
healthy
Healthy overall, with repository identification and workflow pinning gaps.
The repository has 164 open issues but only 2 issues closed and 1 pull request merged in the last month, suggesting some unresolved maintenance backlog.
The repository name does not match the package and its README does not mention @uiw/codemirror-themes. Although a monorepo mismatch can be normal, the missing mention leaves package ownership less transparent.
The project uses TypeScript, npm scripts, and ncc for builds, but no security scanning tools were detected, leaving a modest tooling gap.
Both workflows were analyzed without trigger or sink findings, and one scopes permissions at job level. However, all 11 action references are unpinned, weakening reproducibility and update safety.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@codemirror/view Version ^6.0.0 | — | — |
@codemirror/state Version ^6.0.0 | — | — |
@codemirror/language Version ^6.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.