@clerk/react
Clerk React library
88%
Total Score
healthy
Active Clerk-backed project with frequent releases and broad contributor activity; workflow audit still flags high-confidence injection patterns.
Health Score Breakdown
The repository name does not match @clerk/react and its README does not mention the package. The name mismatch is normal for a monorepo, but the lack of a README mention leaves some uncertainty about the linkage.
All 16 workflows were analyzed and all 88 action references are pinned, but three high-confidence template-injection findings remain in ci.yml; four high-confidence ad hoc package-install findings also weaken workflow hygiene. No untrusted checkout or script-injection sink was reported, so these are not by themselves a severe dependency-health risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version 2.8.1 | — | — |
@clerk/shared Version ^4.40.0 | — | — |
Weekly Downloads
Info
- Last Published
- 6 days ago
- Created
- 11 months ago
- Unpacked Size
- 2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.