← Home

@codemirror/lang-html

HTML language support for the CodeMirror code editor

31
Versions
MIT
License
No
Install Scripts
Missing
Provenance

Supply chain provenance

Status for the latest visible version.

No SLSA provenance npm registry signatures gitHead linked

Without SLSA provenance there is no cryptographic link between this tarball and the public source, so a manually published version cannot be tied back to a reviewed commit.

Maintainers

adrianheinemarijn

Keywords

editorcode

Accepted risks

Findings the reviewer chose to accept rather than block on.

SourceRuleReasonAccepted byWhen
phantom-deps phantom-dep:lezer-tree AI (phantom-deps): lezer-tree is a legitimate declared dependency in the CodeMirror/Lezer ecosystem; phantom detection is a false positive for this bundled package. ai
phantom-deps phantom-dep:@codemirror/autocomplete AI (phantom-deps): Same-org dependency legitimately declared; phantom detection is a false positive for this bundled CodeMirror package. ai
provenance no-provenance AI (provenance): Marijn Haverbeke is the canonical CodeMirror author with a 4957-day track record; lack of Sigstore provenance is not a meaningful risk signal for this publisher. ai
phantom-deps phantom-dep:@lezer/css AI (phantom-deps): @lezer/css is a legitimate sibling package in the Lezer ecosystem; referenced in config files as part of the build setup, not a security concern. ai

Versions (showing 31 of 31)

Version Deps Published
6.4.11 9 / 1
6.4.10 9 / 1
6.4.9 9 / 1
6.4.8 9 / 1
6.4.7 9 / 1
6.4.6 9 / 1
6.4.5 9 / 1
6.4.4 9 / 1
6.4.3 9 / 1
6.4.2 9 / 1
6.4.1 9 / 1
6.4.0 9 / 1
6.3.1 8 / 1
6.3.0 8 / 1
6.2.0 8 / 1
6.1.4 8 / 1
6.1.3 8 / 1
6.1.2 8 / 1
6.1.1 8 / 1
6.1.0 7 / 1
6.0.0 7 / 1
0.20.0 7 / 1
0.19.4 8 / 1
0.19.3 8 / 1
0.19.2 8 / 1
0.19.1 8 / 1
0.19.0 8 / 1
0.18.1 8 / 1
0.18.0 8 / 6
0.17.1 8 / 6
0.17.0 8 / 6