An **EXPERIMENTAL** Webpack plugin to enable "Fast Refresh" (also previously known as _Hot Reloading_) for React components.
82%
Total Score
70
100
91
75
50
No build attestation or trusted-publisher identity is present, leaving the relationship between source and published artifact less transparent.
Only one registry account has publish access. This is a publishing-capacity concern for a user-owned project, although repository activity shows the account is currently active.
The repository is owned by a user rather than an organization, so there is no organizational handoff signal to offset the concentrated contributor base.
One contributor made 10 of 11 recent commits, so maintenance is highly concentrated; a second contributor remains active, partially reducing the continuity risk.
The project uses TypeScript, Webpack, and Babel build tooling, but no security-scanning tool was detected, leaving a modest review gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
anser Version ^2.1.1 | — | — |
source-map Version ^0.7.3 | — | — |
core-js-pure Version ^3.23.3 | — | — |
schema-utils Version ^4.2.0 | — | — |
html-entities Version ^2.1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.