Package Health

angular-froala-wysiwyg

[![npm](https://img.shields.io/npm/v/angular-froala-wysiwyg.svg)](https://www.npmjs.com/package/angular-froala-wysiwyg) [![npm](https://img.shields.io/npm/dm/angular-froala-wysiwyg.svg)](https://www.npmjs.com/package/angular-froala-wysiwyg) [![npm](https:

Latest 5.5.0NPMNPM

62%

Total Score

caution

Usable with caveats: active releases and organizational backing are offset by one-person recent activity and workflow security weaknesses.

Are you affected? Scan for Free

Health Score Breakdown

Workflow auditdanger

Both workflows grant top-level write permissions and all three action references are unpinned; the audit also found a high-confidence template-injection issue in sync-version.yml. The absence of untrusted checkouts and dangerous triggers limits, but does not remove, the concern.

Licensecaution

No license declaration or license file was found in the package or repository, leaving reuse and redistribution terms unclear.

Repo bus factorcaution

One contributor made all five commits in the last three months, creating concentration risk; organization ownership provides some ability to hand maintenance off, so this is not severe on its own.

Repo commit activitycaution

Five commits were made in the last three months, showing activity, but all recent commits came from one active maintainer.

Repo issue activitycaution

The repository has 187 open issues, while only one issue was opened and none were closed in the last month; this suggests a substantial unresolved backlog despite one merged pull request.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2024-10070
angular-froala-wysiwyg is vulnerable to Cross-site Scripting (XSS) in versions 4.0.1 - 4.1.3.
4.0.1 - 4.1.3
Medium

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
tslib
Version ^2.3.0
—
—
froala-editor
Version 5.5.0
—
—

Weekly Downloads

Info

Last Published
11 days ago
Created
9 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform