Package Health

launch-editor

launch editor from node.js

Latest 2.14.2NPMNPM

82%

Total Score

healthy

Recent releases and organization backing are strong, but all repository commits in the last three months came from one contributor.

Are you affected? Scan for Free

Health Score Breakdown

Repo bus factorcaution

All 5 commits in the last three months came from one contributor, creating a real continuity risk. Organization ownership provides some ability to hand off maintenance, so this is a caution rather than a severe risk.

Repo commit activitycaution

Five commits were made in the last three months, so maintenance has not stopped. However, the activity is relatively light and concentrated, which is partly reflected by the bus-factor signal.

Vulnerabilities

TitleVersionsSeverity
CVE-2026-53632
launch-editor is vulnerable to External Control of File Name or Path in versions 0.0.0 - 2.14.0.
0.0.0 - 2.14.0
Medium
CVE-2024-52011
launch-editor is vulnerable to Improper Neutralization of Special Elements used in a Command ('Command Injection') in versions 0.0.0 - 2.8.2.
0.0.0 - 2.8.2
High

Package versions

Direct Dependencies

DependencyLast ReleaseScore
picocolors
Version ^1.1.1
—
—
shell-quote
Version ^1.10.0
—
—

Weekly Downloads

Info

Last Published
6 days ago
Created
8 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform