Is codemirror safe to use?

codemirror has no known vulnerabilities on the latest version (6.0.2). DepScope rates its health at 57/100 (high risk).

What is the latest version of codemirror?

The latest version of codemirror is 6.0.2, released 2025-06-19.

Does codemirror have known vulnerabilities?

No known vulnerabilities on the latest version of codemirror.

Is codemirror deprecated?

No, codemirror is actively maintained. Latest release: 6.0.2 (2025-06-19).

What are alternatives to codemirror?

Popular alternatives to codemirror in npm include: semver, ansi-styles, minimatch, debug, brace-expansion.

What license does codemirror use?

codemirror is licensed under MIT.

codemirror

npmv6.0.2

Basic configuration for the CodeMirror code editor

License MITpermissive155 versions1 maintainers7 deps7,122,247 weekly dl

codemirror/basic-setup

/ 100

Health

safe to use

[email protected] is safe to use (health: 57/100)

Health breakdown0 – 100

0/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

0/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

364.4 KBminified

116.0 KB gzipped

7 direct dependencies

ESM

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (7)

@codemirror/lint @codemirror/view @codemirror/state @codemirror/search @codemirror/commands @codemirror/language @codemirror/autocomplete

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/codemirror