Package Health/@module-federation/bridge-react-webpack-plugin

@module-federation/bridge-react-webpack-plugin

React bridge is used to load the routing module in mf, so that the routing module can work properly with the host environment.

Latest 2.9.2

NPM

48%

Total Score

unhealthy

Risky: a lookalike identity warning and workflow secret-handling findings outweigh otherwise strong maintenance signals.

Health Score Breakdown

Name lookalike

The package name resembles React, and the README is marked as identifying the package with that lookalike, which is strong evidence of identity confusion despite zero artifact overlap and no borrowed identity flag.

Workflow audit

All 26 workflows were analyzed and uses are fully pinned, but high-confidence secrets-inherit findings and high-confidence template-injection findings create meaningful workflow hygiene risk; the low-confidence cache finding and ordinary triggers add little weight.

Repo package mention

The repository name does not match this package and its README does not mention the package, creating uncertainty about whether the linked monorepo clearly represents this release.

Security policy

The repository has no security policy, leaving vulnerability-reporting expectations and response procedures undocumented.

Version stability

Version 2.9.2 is a stable major release rather than a prerelease, although 70% of recent releases are prereleases, which adds some churn.