← Home

@ckeditor/ckeditor5-track-changes

npm Homepage

CKEditor 5 track changes plugin.

5
Versions
SEE LICENSE IN LICENSE.md
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source — the axios compromise (March 2026) relied on exactly this gap.

Maintainers

ckeditor

Keywords

CKEditorckeditor5ckeditor 5WYSIWYGWYSIWYWtextrich-textrichtexteditoreditinghtmloperational transformationotcollaborationcollaborativereal-timerealtimeframework

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:es-toolkit AI (phantom-deps): es-toolkit is a utility library legitimately declared as a runtime dependency; phantom-dep pattern is expected in modular plugin ecosystems. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-font AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-link AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-list AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-icons AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-image AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-style AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-table AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-heading AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-clipboard AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-highlight AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-code-block AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-media-embed AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-merge-fields AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-find-and-replace AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-editor-multi-root AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai
phantom-deps phantom-dep:@ckeditor/ckeditor5-restricted-editing AI (phantom-deps): CKEditor5 plugins declare peer/plugin dependencies that are loaded dynamically; phantom-dep is expected for this architecture. ai

Versions (showing 5 of 5)

Version Deps Published
48.2.0 25 / 0
48.1.1 25 / 0
48.1.0 25 / 0
48.0.1 25 / 0
48.0.0 25 / 0

v48.2.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.1.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.1.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.0.1

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Consider requesting the maintainer enable provenance via CI/CD.

v48.0.0

1 finding
LOW No provenance attestation provenance

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.