
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@matrajs/core
Advanced tools
A headless rich text editor framework with a first-class extension API. Zero dependencies.
A headless rich text editor framework. Engine, document model, extension API and starter kit — framework-agnostic and MIT.
npm i @matrajs/core
import { createEditor, starterKit } from '@matrajs/core'
const editor = createEditor({ extensions: starterKit, content: '<p>Hello</p>' })
editor.mount(element)
editor.commands.toggleHeading(2)
Commands are inferred. editor.commands is built from the definitions you
pass — no module augmentation, no registry, no generics to thread. Calling a
command no extension defines is a compile error.
The engine stays hidden. The document is plain JSON and no engine type
appears in a public signature. editor.unsafe is the escape hatch and is
excluded from semver.
Positions survive time. ctx.mark() returns a marker that re-resolves a
range through every edit made since it was taken — the reason a three-second-late
AI response lands on the right words instead of corrupting the paragraph.
@matrajs/react — useEditor, useEditorState, EditorContent
@matrajs/ai — streaming edits that survive concurrent typing
Docs: https://matrajs.com
MIT.
FAQs
A headless rich text editor framework with a first-class extension API. Zero dependencies.
The npm package @matrajs/core receives a total of 56 weekly downloads. As such, @matrajs/core popularity was classified as not popular.
We found that @matrajs/core demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.