@hello-pangea/dnd
Beautiful and accessible drag and drop for lists with React
61%
Total Score
caution
Usable with caveats: no releases in the last 12 months and no commits in the last 3 months.
Health Score Breakdown
No build attestation or trusted-publisher provenance was provided, leaving publication authenticity less transparent than it could be.
A prepare install script is present. This is a mild supply-chain and installation-complexity consideration, but the available repository and build evidence gives it context.
The package has 13 releases over about four years, but none in the last 12 months; this weakens evidence of ongoing maintenance.
There were zero commits and zero active maintainers in the last three months, a meaningful maintenance concern even though the repository was recently pushed.
The repository has active pull-request traffic, but one merged pull request and no newly reported issues in the last month indicate limited recent delivery evidence.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 redux Version ^5.0.1 | — | — |
raf-schd Version ^4.0.3 | — | — |
react-redux Version ^9.2.0 | — | — |
css-box-model Version ^1.2.1 | — | — |
@babel/runtime Version ^7.26.7 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 4 years ago
- Unpacked Size
- 1.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.