summernote/summernote
The organization-backed repository has tests, release notes, a clear MIT license, and CodeQL scanning. The package is deprecated and has had no registry release for about 9 years, while recent repository commit activity is also absent.
20%
Total Score
50
75
50
Health Score Breakdown
Packagist marks the entire package as abandoned, with no replacement supplied. This is a severe adoption and maintenance warning even though the linked repository still exists.
The package has 40 historical releases, but none in the last 12 months and its latest release was about 9 years ago. That indicates a materially stale dependency.
The repository recorded 0 commits and 0 active maintainers in the last 3 months. This weakens evidence that the project can address current defects despite its historical activity.
The linked repository has no security policy. For a maintained browser-facing editor, that is a modest transparency and vulnerability-reporting gap.
All 8 analyzed action references are unpinned, creating avoidable build-integrity exposure. The low-confidence cache finding is only hygiene, while the trusted-publishing audit finding adds a smaller caution.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Alan |
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 12 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.