quill

Your powerful, rich text editor

Latest 2.0.3

NPM

62%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Attestations

Are you affected? Scan for Free

Health Score Breakdown

Build provenance

No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent, though this is not by itself evidence of an unhealthy release.

Release history

The package has a long history and 103 releases, but it has had no releases in the last 12 months; this indicates slowed maintenance rather than abandonment by itself.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months, a meaningful maintenance warning despite the project's long history and organizational ownership.

Repo issue activity

There were no new issues in the last month, only two closed issues, and no merged pull requests, indicating limited recent project movement.

Repo tooling

The repository uses TypeScript and npm build tooling, but no security scanning tools were detected, leaving a modest security-process gap.

Vulnerabilities

Title	Versions	Severity
CVE-2025-15056 quill is vulnerable to Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') in versions 2.0.3 - 2.0.3.	2.0.3 - 2.0.3	Medium
AIKIDO-2024-10030 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. quill is vulnerable to Tabnabbing Vulnerability in versions 0.0.1 - 1.3.7.	0.0.1 - 1.3.7	Low
CVE-2021-3163 quill is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 1.3.7.	0.0.0 - 1.3.7	Medium