Live data from GitHub and npm, updated daily.
Data last fetched: 2026-05-15
1 active CVE reported via OSV.dev
Malicious code in @medusajs/medusa (npm)
Other CMS projects in the Node.js ecosystem worth evaluating.
Get SLA-backed support, security patches, and direct access to senior engineers for Medusa โ without relying on volunteer maintainers.
Talk to an Expert โ