prosemirror-model
ProseMirror's document model
74%
Total Score
caution
Usable with caveats: mature, regularly updated, but source transparency and build provenance are limited.
Health Score Breakdown
No build attestation, trusted publisher, or staged publishing evidence is present, leaving the origin of the published artifact less verifiable.
Only one registry account has publish access. This is not evidence of maintenance quality by itself, but it leaves less publishing redundancy than a broader release team.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10182 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. prosemirror-model is vulnerable to Cross-site Scripting (XSS) in versions 1.0.0 - 1.22.0. | 1.0.0 - 1.22.0 | Low |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 orderedmap Version ^2.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 21 days ago
- Created
- 10 years ago
- Unpacked Size
- 0.6 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.