@dnd-kit/modifiers

Build provenancecaution

No build attestation or trusted-publisher identity is present, reducing publication transparency. This is a supply-chain hygiene gap rather than evidence that the release is unsafe.

Maintainerscaution

Only one registry account has publish access, which is a publishing concentration risk. The repository's six active contributors provide some maintenance capacity but do not remove release-account concentration.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no demonstrated organizational handoff capacity. Active contributions from six maintainers partly compensate for that limitation.

Release historycaution

The package has 102 releases since January 2021, but its latest registry release was December 4, 2024, with no releases in the last 12 months. Active repository work partly offsets the stale published release cadence.

Repo package mentioncaution

The repository name does not match the package and its README does not mention @dnd-kit/modifiers, so package-to-repository ownership is less transparent. The package appears alongside a broader project repository, but the missing explicit mention remains a caution.