Gathering detailed insights and metrics for tui-editor
Gathering detailed insights and metrics for tui-editor
🍞📝 Markdown WYSIWYG Editor. GFM Standard + Chart & UML Extensible.
Installations
npm install tui-editorDeveloper Guide
BETA
Typescript
No
Module System
CommonJS
Node Version
10.17.0
NPM Version
6.11.3
Releases
134
Languages
5
TypeScript
CSS
JavaScript
HTML
Vue
TypeScript (85.81%)
CSS (4.99%)
JavaScript (4.96%)
HTML (4.13%)
Vue (0.11%)
Developer
Download Statistics
Total Downloads
0
Last Day
0
Last Week
0
Last Month
0
Last Year
0
GitHub Statistics
MIT License
17,601 Stars
361 Commits
1,814 Forks
227 Watchers
56 Branches
114 Contributors
Updated on Jul 15, 2025
Maintainers
1
Package Meta Information
Latest Version
1.4.10
Package Id
tui-editor@1.4.10
Size
4.79 MB
NPM Version
6.11.3
Node Version
10.17.0
Published on
Dec 12, 2019
Total Downloads
Cumulative downloads
Total Downloads
NaN
Last Day
0%
NaN
Compared to previous day
Last Week
0%
NaN
Compared to previous week
Last Month
0%
NaN
Compared to previous month
Last Year
0%
NaN
Compared to previous year
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dependencies
14
Dev Dependencies
43
@toast-ui/release-notesbabel-corebabel-eslintbabel-loaderbabel-plugin-istanbulbabel-plugin-transform-class-propertiesbabel-preset-es2015clean-csscopy-webpack-plugincross-enveslinteslint-config-tuieslint-loaderistanbul-instrumenter-loaderjasmine-corekarmakarma-chrome-launcherkarma-clikarma-coveragekarma-edge-launcherkarma-firefox-launcherkarma-ie-launcherkarma-jasminekarma-jasmine-ajaxkarma-jasmine-jquerykarma-junit-reporterkarma-narrow-reporterkarma-remap-coveragekarma-safari-launcherkarma-sauce-launcherkarma-sourcemap-loaderkarma-webdriver-launcherkarma-webpacksafe-umd-webpack-pluginterser-webpack-plugintestcafetestcafe-browser-provider-saucelabstslinttypescriptwebpackwebpack-bundle-analyzerwebpack-cliwebpack-dev-server
GFM Markdown WYSIWYG Editor - Productive and Extensible
???? Table of Contents
- Collect Statistics on the Use of Open Source
- Documents
- Standard and Extensible
- Features
- Examples
- Install
- Wrappers
- Usage
- Browser Support
- Pull Request Steps
- Contributing
- TOAST UI Family
- Used By
- License
Collect Statistics on the Use of Open Source
TOAST UI Editor applies Google Analytics (GA) to collect statistics on the use of open source, in order to identify how widely TOAST UI Editor is used throughout the world. It also serves as important index to determine the future course of projects. location.hostname (e.g. > “ui.toast.com") is to be collected and the sole purpose is nothing but to measure statistics on the usage. To disable GA, use the following usageStatistics options when creating editor.
1const options = { 2 // ... 3 usageStatistics: false 4} 5 6const instance = new Editor(options);
Or, include tui-code-snippet(v1.5.0 or later) and then immediately write the options as follows:
1tui.usageStatistics = false;
???? Documents
Standard and Extensible
CommonMark + GFM Specifications
Today CommonMark is the de-facto Markdown standard. GFM (GitHub Flavored Markdown) is another popular specification based on CommonMark - maintained by GitHub, which is the Markdown mostly used. TOAST UI Editor follows both CommonMark and GFM specifications. Write documents with ease using productive tools provided by TOAST UI Editor and you can easily open the produced document wherever the specifications are supported.
Powerful Extensions
CommonMark and GFM are great, but we often need more abstraction. The TOAST UI Editor comes with powerful Extensions in compliance with the Markdown syntax. You also get the flexibility to develop your own extensions using simple APIs.
Here are some of the extensions you can start with:
- Color Picker: ColorPicker provides an easy way to color text with a GUI tool box.
- Chart Code Block: A code block marked as a 'chart' will render charts.
- UML Code Block: A code block marked as an 'uml' will render UML diagrams.
- Table Merge: You can merge columns and rows in tables.
To learn more about Extensions check the Using Extension.
???? Features
TOAST UI Editor provides Markdown mode and WYSIWYG mode.
Depending on the type of use you want like production of Markdown or maybe to just edit the Markdown. The TOAST UI Editor can be helpful for both the usage. It offers Markdown mode and WYSIWYG mode, which can be switched any point in time.
Productive Markdown Mode
- Live Preview: Edit Markdown while keeping an eye on the rendered HTML. Your edits will be applied immediately.
- Scrolling Sync: Synchronous scrolling between Markdown and Preview. You don't need to scroll through each one separately.
- Auto Indent: The cursor will always be where you want it to be.
- Syntax Highlight: You can check broken Markdown syntax immediately.
Easy WYSIWYG Mode
- Copy and Paste: Paste anything from browser, screenshot, excel, powerpoint, etc.
- Codeblock Editor: Highlight 170+ languages with full size code editor.
- Table: Hate the Markdown table? You can do everything with a mouse.
And More
- i18n: English, Dutch, Korean, Japanese, Chinese, Spanish, German, Russian, French, Ukrainian, Turkish, Finnish, Czech, Arabic, Polish, Galician, Swedish, Italian + language you extend.
- Viewer: Renders Markdown content with extensions
???? Examples
???? Install
TOAST UI products can be used by using the package manager or downloading the source directly. However, we highly recommend using the package manager.
Via Package Manager
TOAST UI products are registered in two package managers, npm and bower. You can conveniently install it using the commands provided by the package manager. When using npm, be sure to use it in the environment Node.js is installed.
npm
1$ npm install --save tui-editor # Latest version 2$ npm install --save tui-editor@<version> # Specific version
Via Contents Delivery Network (CDN)
TOAST UI products are available over the CDN powered by TOAST Cloud.
You can use the CDN as below.
1<!-- Styles --> 2<link rel="stylesheet" href="https://uicdn.toast.com/tui-editor/latest/tui-editor.css"></link> 3<link rel="stylesheet" href="https://uicdn.toast.com/tui-editor/latest/tui-editor-contents.css"></link> 4<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/codemirror/5.48.4/codemirror.css"></link> 5<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/highlight.js/9.12.0/styles/github.min.css"></link> 6<!-- Scripts --> 7<script src="https://uicdn.toast.com/tui-editor/latest/tui-editor-Editor-full.js"></script>
If you want to use a specific version, use the tag name instead of latest in the url's path.
The CDN directory has the following structure.
tui-editor/
├─ latest/
│ ├─ tui-editor-Editor.js
│ ├─ tui-editor-Editor.min.js
│ └─ ...
├─ v1.1.0/
│ ├─ ...
Download Source Files
????️ Wrappers
- toast-ui.vue-editor: Vue wrapper component is powered by NHN.
- toast-ui.react-editor: React wrapper component is powered by NHN.
- ember-tui-editor: Ember wrapper component by @evocount. Thanks for their effort.
???? Usage
The code below shows an example of using ES6 in node environment. If you are using bower please see Getting Started with Bower.
Create Editor
HTML
Add the container element where TOAST UI Editor will be created.
1<div id="editorSection"></div>
JavaScript
TOAST UI Editor can be used by creating an instance with the constructor function. To get the constructor function, you should import the module using one of the following ways depending on your environment.
1const Editor = require('tui-editor'); /* CommonJS */
1import Editor from 'tui-editor'; /* ES6 */
Then import styles of TOAST UI Editor and dependencies.
1import 'tui-editor/dist/tui-editor.css'; // editor's ui 2import 'tui-editor/dist/tui-editor-contents.css'; // editor's content 3import 'codemirror/lib/codemirror.css'; // codemirror 4import 'highlight.js/styles/github.css'; // code block highlight
Finally you can create an instance with options and call various API after creating an instance.
1import 'codemirror/lib/codemirror.css'; 2import 'tui-editor/dist/tui-editor.css'; 3import 'tui-editor/dist/tui-editor-contents.css'; 4import 'highlight.js/styles/github.css'; 5 6import Editor from 'tui-editor'; 7 8const instance = new Editor({ 9 el: document.querySelector('#editorSection'), 10 initialEditType: 'markdown', 11 previewStyle: 'vertical', 12 height: '300px' 13}); 14 15instance.getHtml();
If you use jQuery plugin, you can use it as follows.
1$('#editorSection').tuiEditor({ 2 initialEditType: 'markdown', 3 previewStyle: 'vertical', 4 height: '300px' 5});
Default Options
height: Height in string or auto ex)300px|autoinitialValue: Initial value. Set Markdown stringinitialEditType: Initial type to showmarkdown|wysiwygpreviewType: Preview style of Markdown modetab|verticalusageStatistics: Let us know the hostname. We want to learn from you how you are using the Editor. You are free to disable it.true|false
Find out more options here
Create Viewer
TOAST UI Editor provides the Viewer in case you want to show Markdown content without loading the Editor. The Viewer is much lighter than the Editor.
1import 'tui-editor/dist/tui-editor-contents.css'; 2import 'highlight.js/styles/github.css'; 3 4import Viewer from 'tui-editor/dist/tui-editor-Viewer'; 5 6const instance = new Viewer({ 7 el: document.querySelector('#viewerSection'), 8 height: '500px', 9 initialValue: '# content to be rendered' 10}); 11 12instance.getHtml();
Be careful not to load both the Editor and the Viewer at the same time because the Editor already contains the Viewer function, you can initialize editor Editor.factory() and set the viewer option to value true in order to make the editor a viewer. You can also call getHtml() to render the HTML.
1import Editor from 'tui-editor'; 2 3const instance = Editor.factory({ 4 el: document.querySelector('#viewerSection'), 5 viewer: true, 6 height: '500px', 7 initialValue: '# content to be rendered' 8});
TOAST UI Editor follows CommonMark and GFM. So any Markdown renderer including markdown-it can handle the content made using TOAST UI Editor. You can also use any of these renderer in place of TOAST UI Editor Viewer.
???? Browser Support
 Chrome |  Internet Explorer |  Edge |  Safari |  Firefox |
|---|---|---|---|---|
| Yes | 10+ | Yes | Yes | Yes |
???? Pull Request Steps
All TOAST UI products are open source. A Pull Request (PR) can be made upon fixing an issue or developing additional features to be implemented.
Install
To install, first fork the master branch to your own personal repository. Then, clone the forked repository to your local machine, and install the following node module. Prior to development, first, make sure that the modules are properly installed.
1$ git clone https://github.com/{your-personal-repo}/tui.editor.git 2$ cd tui.editor 3$ npm install 4$ npm run test
Develop
You can see your code is reflected as soon as you saving the codes by running a server. Don't miss adding test cases and then make green rights.
Run webpack-dev-server
1$ npm run serve
Run karma
1$ npm run test
Pull Request
Before creating a PR, test and check for any errors. If there are no errors, then commit and push.
For more information, please refer to the Contributing section.
???? Contributing
???? TOAST UI Family
???? Used By
- TOAST Dooray! - Collaboration Service (Project, Messenger, Mail, Calendar, Drive, Wiki, Contacts)
- UNOTES - Visual Studio Code Extension
???? License
No vulnerabilities found.
Reason
no dangerous workflow patterns detected
Reason
no binaries found in the repo
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
dependency not pinned by hash detected -- score normalized to 4
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-types.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/check-types.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/check-types.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/check-types.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/examplePageTest.yml:13: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/examplePageTest.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/examplePageTest.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/examplePageTest.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/linter.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/linter.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/linter.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/plugin-test.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/plugin-test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/plugin-test.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/plugin-test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-cdn.yml:8: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-cdn.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-cdn.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-cdn.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-cdn.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-cdn.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-cdn.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-cdn.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-cdn.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-cdn.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-cdn.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-cdn.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-cdn.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-cdn.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-cdn.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-cdn.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:8: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:99: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:116: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-doc.yml:130: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-doc.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-wrapper.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm-wrapper.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-wrapper.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm-wrapper.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-wrapper.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm-wrapper.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-wrapper.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm-wrapper.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-wrapper.yml:81: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm-wrapper.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-npm-wrapper.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm-wrapper.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-wrapper.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm-wrapper.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-wrapper.yml:8: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm-wrapper.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm-wrapper.yml:10: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm-wrapper.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:98: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:101: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:105: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:8: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:15: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:25: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/publish-npm.yml:68: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/publish-npm.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:9: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/test.yml/master?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/test.yml:11: update your workflow using https://app.stepsecurity.io/secureworkflow/nhn/tui.editor/test.yml/master?enable=pin
- Warn: npmCommand not pinned by hash: .github/workflows/plugin-test.yml:16
- Warn: npmCommand not pinned by hash: .github/workflows/publish-doc.yml:93
- Warn: npmCommand not pinned by hash: .github/workflows/publish-doc.yml:104
- Warn: npmCommand not pinned by hash: .github/workflows/test.yml:16
- Info: 0 out of 44 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 7 third-party GitHubAction dependencies pinned
- Info: 17 out of 21 npmCommand dependencies pinned
Reason
Found 9/30 approved changesets -- score normalized to 3
Reason
0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Reason
no effort to earn an OpenSSF best practices badge detected
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/check-types.yml:1
- Warn: no topLevel permission defined: .github/workflows/examplePageTest.yml:1
- Warn: no topLevel permission defined: .github/workflows/linter.yml:1
- Warn: no topLevel permission defined: .github/workflows/plugin-test.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-cdn.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-doc.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-npm-wrapper.yml:1
- Warn: no topLevel permission defined: .github/workflows/publish-npm.yml:1
- Warn: no topLevel permission defined: .github/workflows/test.yml:1
- Info: no jobLevel write permissions found
Reason
security policy file not detected
Details
- Warn: no security policy file detected
- Warn: no security file to analyze
- Warn: no security file to analyze
- Warn: no security file to analyze
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 13 are checked with a SAST tool
Reason
92 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: GHSA-968p-4wvh-cqc8
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-h5c3-5r3r-rr8q
- Warn: Project is vulnerable to: GHSA-rmvr-2pp2-xj38
- Warn: Project is vulnerable to: GHSA-xx4v-prfh-6cgc
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25
- Warn: Project is vulnerable to: GHSA-wf5p-g6vw-rhxx
- Warn: Project is vulnerable to: GHSA-jr5f-v2jv-69x6
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-v6h2-p8h4-qcjw
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
- Warn: Project is vulnerable to: GHSA-3wcq-x3mq-6r9p
- Warn: Project is vulnerable to: GHSA-p3vf-v8qc-cwcr
- Warn: Project is vulnerable to: GHSA-gx9m-whjm-85jf
- Warn: Project is vulnerable to: GHSA-mmhx-hmjr-r674
- Warn: Project is vulnerable to: GHSA-vhxf-7vqr-mrjg
- Warn: Project is vulnerable to: GHSA-67mh-4wv8-2f99
- Warn: Project is vulnerable to: GHSA-6h5x-7c5m-7cr7
- Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
- Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
- Warn: Project is vulnerable to: GHSA-jchw-25xp-jwwc
- Warn: Project is vulnerable to: GHSA-cxjh-pqwp-8mfp
- Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq
- Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488
- Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-mwcw-c2x4-8c55
- Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
- Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5
- Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp
- Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq
- Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr
- Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765
- Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g
- Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr
- Warn: Project is vulnerable to: GHSA-3j8f-xvm3-ffx4
- Warn: Project is vulnerable to: GHSA-4p35-cfcx-8653
- Warn: Project is vulnerable to: GHSA-7f3x-x4pr-wqhj
- Warn: Project is vulnerable to: GHSA-jpp7-7chh-cf67
- Warn: Project is vulnerable to: GHSA-q6wq-5p59-983w
- Warn: Project is vulnerable to: GHSA-j9fq-vwqv-2fm2
- Warn: Project is vulnerable to: GHSA-pqw5-jmp5-px4v
- Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-rhx6-c78j-4q9w
- Warn: Project is vulnerable to: GHSA-566m-qj78-rww5
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-hwj9-h5mp-3pm3
- Warn: Project is vulnerable to: GHSA-gj77-59wh-66hg
- Warn: Project is vulnerable to: GHSA-hqhp-5p83-hx96
- Warn: Project is vulnerable to: GHSA-3949-f494-cm99
- Warn: Project is vulnerable to: GHSA-x7hr-w5r2-h6wg
- Warn: Project is vulnerable to: GHSA-3965-hpx2-q597
- Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-76p7-773f-r4q5
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
- Warn: Project is vulnerable to: GHSA-r628-mhmh-qjhw
- Warn: Project is vulnerable to: GHSA-9r2w-394v-53qc
- Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
- Warn: Project is vulnerable to: GHSA-qq89-hq3f-393p
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
- Warn: Project is vulnerable to: GHSA-5j4c-8p2g-v4jx
- Warn: Project is vulnerable to: GHSA-g3ch-rx76-35fx
- Warn: Project is vulnerable to: GHSA-hc6q-2mpp-qw7j
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
- Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
- Warn: Project is vulnerable to: GHSA-4v9v-hfq4-rm2v
- Warn: Project is vulnerable to: GHSA-9jgg-88mc-972h
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
Score
3.3
/10
Last Scanned on 2025-07-07
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn More