prosemirror-markdown
Clear MIT licensing, bundled TypeScript declarations, a substantial README, and source files make the artifact easy to consume. The prepare install hook and unavailable repository verification add modest transparency and installation concerns.
82%
Total Score
50
100
100
75
50
Health Score Breakdown
No build attestation, trusted publisher identity, or staged-publishing record is present, leaving release provenance less independently verifiable.
A prepare lifecycle script runs during installation, adding build or execution behavior to dependency installation and creating a modest operational concern.
One registry account has publish access. This is administrative metadata and does not establish actual maintenance capacity, so it provides little positive evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 markdown-it Version ^14.0.0 | — | — |
prosemirror-model Version ^1.25.0 | — | — |
@types/markdown-it Version ^14.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 14 days ago
- Created
- 10 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.