
Research
2025 Report: Destructive Malware in Open Source Packages
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.
prosemirror-flat-list
Advanced tools
prosemirror-flat-list introduces a new ProseMirror list design different from the prosemirror-schema-list.
This project simplifies the list design in ProseMirror by providing only one node type: list. You can add any block nodes as a children of a list node, including another list node. The first child can also be any block type, not just a paragraph.
This design is “flat” because it does not use <ul> (bullet_list) and <ol> (order_list) elements to wrap list items. This makes the data structure simpler and easier to manipulate. The list node will render as a <div> element.
We adds two new kinds of lists: task and toggle. You can interact with them using the mouse. These types are in addition to the existing bullet and ordered lists from prosemirror-schema-list.

This module improves how the indent and dedent commands work (they are called liftListItem and sinkListItem in prosemirror-schema-list). These two commands now try to move only the selected part of the document.
⬇ Unselected paragraph (e.g. "A complex list") is also moved when using the old
sinkListItemcommand inprosemirror-schema-list.

⬇ Only selected paragraph are moved when using the new
dedentcommand inprosemirror-flat-list.

Since the first child of a list node can also be a list node, we can have multiple bullet points on one line. This feature allows a list item to have arbitrary indentations by hiding all the bullets except the last one in one line.

prosemirror-flat-list provides some input rules for creating list nodes. You can type:
- or * followed by a space to create a bullet list node1. followed by a space to create an ordered list node[ ] or [x] followed by a space to create a task list node>> followed by a space to create a toggle list nodeYou can also use wrappingListInputRule function from this module to create your own input rules.
If you want to migrate your existing documents that use prosemirror-schema-list, you can use migrateDocJSON function from this module. It accepts an ProseMirror document JSON object and returns an updated document JSON object (or null if no migration is needed). It will replace all the old list nodes with the new list nodes. For example:
import { migrateDocJSON } from 'prosemirror-flat-list'
const oldDoc = {
type: 'doc',
content: [
{
type: 'ordered_list',
content: [
{
type: 'list_item',
content: [{ type: 'paragraph', text: 'Item 1' }],
},
{
type: 'list_item',
content: [{ type: 'paragraph', text: 'Item 2' }],
},
],
},
],
}
const newDoc = migrateDocJSON(oldDoc)
console.log(newDoc)
// {
// type: 'doc',
// content: [{
// type: 'list',
// attrs: { kind: 'ordered' },
// content: [
// { type: 'paragraph', text: 'Item 1' },
// { type: 'paragraph', text: 'Item 2' }
// ]
// }]
// }
FAQs
Powerful list support for ProseMirror
We found that prosemirror-flat-list demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Research
Destructive malware is rising across open source registries, using delays and kill switches to wipe code, break builds, and disrupt CI/CD.

Security News
Socket CTO Ahmad Nassri shares practical AI coding techniques, tools, and team workflows, plus what still feels noisy and why shipping remains human-led.

Research
/Security News
A five-month operation turned 27 npm packages into durable hosting for browser-run lures that mimic document-sharing portals and Microsoft sign-in, targeting 25 organizations across manufacturing, industrial automation, plastics, and healthcare for credential theft.