Is @milkdown/components safe to use?

@milkdown/components has no known vulnerabilities on the latest version (7.20.0). DepScope rates its health at 62/100 (moderate risk).

What is the latest version of @milkdown/components?

The latest version of @milkdown/components is 7.20.0, released 2026-03-30.

Does @milkdown/components have known vulnerabilities?

No known vulnerabilities on the latest version of @milkdown/components.

Is @milkdown/components deprecated?

No, @milkdown/components is actively maintained. Latest release: 7.20.0 (2026-03-30).

What are alternatives to @milkdown/components?

Popular alternatives to @milkdown/components in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does @milkdown/components use?

@milkdown/components is licensed under MIT.

@milkdown/components

npmv7.20.0

The components module of [milkdown](https://milkdown.dev/).

License MITpermissive53 versions1 maintainers17 deps

Milkdown/milkdown

/ 100

Health

safe to use

@milkdown/[email protected] is safe to use (health: 62/100)

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

15/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (17)

@floating-ui/dom @types/lodash-es clsx dompurify lodash-es nanoid unist-util-visit vue @milkdown/core @milkdown/ctx @milkdown/exception @milkdown/plugin-tooltip @milkdown/preset-commonmark @milkdown/preset-gfm @milkdown/transformer @milkdown/prose @milkdown/utils

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@milkdown/components