Package Health

@chakra-ui/react

Responsive and accessible React UI components built with React and Emotion

Latest 3.37.0NPMNPM

88%

Total Score

healthy

Healthy release backed by active maintenance and clear project ownership, with unpinned CI actions as the main caveat.

Health Score Breakdown

Build provenancecaution

The release has no registry build attestation or trusted-publisher identity, leaving publication provenance less transparent than it could be. This is partly offset by the active, organization-owned repository and matching package reference.

Workflow auditcaution

All 9 analyzed action references are unpinned, which weakens build reproducibility and action supply-chain hygiene. However, all three workflows were analyzed with no untrusted checkout, script injection, or high-confidence audit findings, so this is a caution rather than a severe risk.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
csstype
Version ^3.2.3
—
—
@ark-ui/react
Version 5.39.0
—
—
@emotion/utils
Version ^1.4.2
—
—
@emotion/serialize
Version ^1.3.3
—
—
@emotion/is-prop-valid
Version ^1.4.0
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
5 years ago
Unpacked Size
2.6 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform