Edit markdown content in tiptap editor.
58%
Total Score
caution
Usable with caveats: maintenance has stalled, with no releases or commits in the measured periods.
The package has 33 releases since June 2021, but none in the last 12 months; this indicates materially reduced maintenance despite its historically active cadence.
The repository recorded zero commits and zero active maintainers in the last 3 months, reinforcing the release gap and increasing abandonment risk.
There were no issues closed or pull requests merged in the last month, while 22 issues and 3 pull requests remain open; this suggests limited current responsiveness.
The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap for a dependency with no other reported security tooling.
Both workflows were analyzed without high-confidence audit findings or untrusted execution paths, but all 7 action references are unpinned and one workflow grants top-level write permissions, creating avoidable maintenance and supply-chain hygiene risk.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
markdown-it Version ^14.1.0 | — | — |
@types/markdown-it Version ^13.0.7 | — | — |
prosemirror-markdown Version ^1.11.1 | — | — |
markdown-it-task-lists Version ^2.1.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.