miaoxing/ueditor
The MIT license, tests, changelog, and matching organization-backed repository provide useful maintenance and adoption context. The extended release pause, no recent commits, missing security policy, and weak workflow pinning leave meaningful maintenance and build-integrity concerns.
58%
Total Score
75
92
50
Health Score Breakdown
The package has 59 releases and historically released about every 29 days, but it has had no releases in the last 12 months after its latest release in May 2025. That extended pause lowers confidence in ongoing maintenance.
The repository recorded zero commits and zero active maintainers in the last 3 months. Although the repository was pushed in May 2025, the current inactivity is a meaningful abandonment concern.
The linked repository has no security policy. For a package containing editor and upload-related functionality, the absence of a documented vulnerability-reporting path is a real transparency gap.
The single workflow was fully analyzed and has no untrusted checkout or script-injection findings, but all 49 action references are unpinned and the audit found a high-confidence unpinned container image. This weakens build reproducibility and supply-chain hygiene.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 miaoxing/app Version ^0.10.11 | — | — |
miaoxing/file Version ^0.3.41 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 5 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.