@preact/signals
@preact/signals 2.11.2 appears to be a healthy, actively maintained dependency. It has a long release history with 24 releases in the last 12 months, a stable non-prerelease version, no registry deprecation, an active non-archived organization-owned repository, current commit and pull-request activity, tests and changelog coverage in the repository, type declarations, a clear MIT license, and npm provenance with staged publishing. The main residual concerns are concentrated recent commit activity, no repository security policy, and workflows without explicit top-level token permissions; these are meaningful hygiene gaps but are mitigated by the organization backing, multiple active contributors, safe workflow analysis, and absence of dangerous workflow patterns.
91%
Total Score
90
100
95
80
100
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 @preact/signals-core Version ^1.14.4 | — | — |
Weekly Downloads
Info
- Last Published
- 7 days ago
- Created
- 4 years ago
- Unpacked Size
- 0.3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.