fumadocs-mdx
The built-in source for Fumadocs
84%
Total Score
healthy
Frequent releases and active repository work outweigh unpinned workflow actions and limited security transparency.
Health Score Breakdown
The repository name does not match fumadocs-mdx and its README does not mention the package. A name mismatch can be normal for a monorepo, but the lack of a README mention leaves package ownership less transparent.
The repository uses TypeScript, Vitest, Turbo, Vite, and npm scripts, showing a structured build and test setup. No security scanning tools were detected, leaving a modest transparency gap.
The repository has no security policy, which makes vulnerability reporting and response expectations less transparent for adopters.
All 9 analyzed action references are unpinned, and the release workflow grants top-level write permissions. The audit found no untrusted checkout, script injection, or other high-confidence dangerous finding, so this is a hygiene caution rather than a severe risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 zod Version ^4.6.5 | — | — |
yaml Version ^2.9.1 | — | — |
vfile Version ^6.0.3 | — | — |
esbuild Version ^0.28.2 | — | — |
unified Version ^11.0.5 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 2 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.