Package Health

codemirror

Basic configuration for the CodeMirror code editor

Latest 6.0.2NPMNPM

42%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

67

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. This reinforces the archive warning and leaves little evidence of ongoing source maintenance.

Repository archiveddanger

The linked GitHub repository is archived. An archived source project is a severe maintenance and abandonment warning even though it was pushed recently and the registry continues to publish releases.

Repo toolingcaution

No build tool or security-scanning tool was detected in the linked repository, reducing transparency and automated protection for future changes.

Security policycaution

The repository has no security policy. This is not proof of unsafe code, but it weakens the project's stated process for handling vulnerabilities.

Workflow auditcaution

The audit completed without findings, but no workflows were present to analyze, so this provides little evidence about release automation or workflow hygiene.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2026-757251
codemirror is vulnerable to Regular Expression Denial of Service (ReDoS) in versions 2.33.0 - 5.65.21.
2.33.0 - 5.65.21
Medium
CVE-2020-7760
codemirror is vulnerable to Uncontrolled Resource Consumption in versions 0.0.0 - 5.58.2.
0.0.0 - 5.58.2
Medium

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
@codemirror/lint
Version ^6.0.0
—
—
@codemirror/view
Version ^6.0.0
—
—
@codemirror/state
Version ^6.0.0
—
—
@codemirror/search
Version ^6.0.0
—
—
@codemirror/commands
Version ^6.0.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
14 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform