Package Health

@mixpanel/rrdom

`rrdom` is a virtual dom library that is used by `rrweb` to replay DOM mutations. It is a standalone library that can be used to create a virtual dom tree and apply patches to the real dom. It's used in `rrweb` to optimize replay performance especially wh

Latest 2.0.0-alpha.18.6NPMNPM

72%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

83

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

67

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Health Score Breakdown

Build provenancecaution

No build attestation or trusted-publisher identity is present, reducing publication transparency; this is a moderate provenance gap rather than evidence of an unsafe release.

Lifecycle scriptscaution

A prepublish lifecycle script runs during publishing, adding some build or release complexity, but the signal does not show an install-time execution path.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package, so the package-to-repository relationship is less transparent; the mismatch may also reflect a monorepo.

Repo toolingcaution

The project uses established build and test tooling, but no security-scanning tools were detected, leaving a modest hygiene gap.

Version stabilitycaution

This release is a prerelease, and all recent releases are prereleases, so consumers should expect greater API or behavior change risk than with a stable line.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
@mixpanel/rrweb-snapshot
Version ^2.0.0-alpha.18
—
—

Weekly Downloads

Info

Last Published
2 months ago
Created
1 year ago
Unpacked Size
1.9 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform