launch editor from node.js
82%
Total Score
healthy
Recent releases and organization backing are strong, but all repository commits in the last three months came from one contributor.
All 5 commits in the last three months came from one contributor, creating a real continuity risk. Organization ownership provides some ability to hand off maintenance, so this is a caution rather than a severe risk.
Five commits were made in the last three months, so maintenance has not stopped. However, the activity is relatively light and concentrated, which is partly reflected by the bus-factor signal.
| Title | Versions | Severity |
|---|---|---|
CVE-2026-53632 launch-editor is vulnerable to External Control of File Name or Path in versions 0.0.0 - 2.14.0. | 0.0.0 - 2.14.0 | Medium |
CVE-2024-52011 launch-editor is vulnerable to Improper Neutralization of Special Elements used in a Command ('Command Injection') in versions 0.0.0 - 2.8.2. | 0.0.0 - 2.8.2 | High |
| Dependency | Last Release | Score |
|---|---|---|
picocolors Version ^1.1.1 | — | — |
shell-quote Version ^1.10.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.