Keymap plugin for ProseMirror
18%
Total Score
50
100
81
75
There were zero commits and zero active maintainers in the last 3 months. This reinforces the repository's archived state and indicates no current maintenance activity.
The linked ProseMirror repository is marked archived, a severe abandonment signal even though it was reportedly pushed recently; this makes the release unfit to depend on without a maintained successor.
A prepare lifecycle script is present. This is a modest supply-chain and install-behavior consideration, but the signal alone does not show harmful behavior.
The package has existed since 2016 with 30 releases and a roughly 21-day median interval, but has had no releases in the last 12 months; its long history partly offsets, but does not remove, the current maintenance concern.
No security policy was found in the repository. This is a transparency gap, though it is secondary to the archived repository and does not by itself determine the score.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
w3c-keyname Version ^2.2.0 | — | — |
prosemirror-state Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.