Package Health

@react-aria/gridlist

Spectrum UI components in React

Latest 3.15.1NPMNPM

84%

Total Score

healthy

Healthy release backed by frequent maintenance, active contributors, and clear licensing; unpinned workflow actions are the main caveat.

Health Score Breakdown

Repo package mentioncaution

The repository name does not match the package and its README does not mention @react-aria/gridlist. The monorepo context makes the name mismatch ordinary, but the lack of a package mention leaves package-to-source identity less transparent.

Workflow auditcaution

All 8 workflows were analyzed without failed files or audit findings; pull_request_target has no untrusted checkout or script-injection sink, and permissions are mostly read-only or job-scoped. However, all 15 action references are unpinned, creating a genuine reproducibility and dependency-integrity hygiene gap.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Direct Dependencies

DependencyLast ReleaseScore
react-aria
Version ^3.48.0
—
—
@swc/helpers
Version ^0.5.0
—
—

Weekly Downloads

Info

Last Published
4 months ago
Created
4 years ago
Unpacked Size
0.1 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform