Package Health

@react-awesome-query-builder/antd

User-friendly query builder for React. AntDesign widgets

Latest 6.7.0-alpha.0NPMNPM

58%

Total Score

caution

Usable with caveats: maintenance has stalled, with no releases in 12 months and no commits in three months.

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitydanger

The repository recorded 0 commits and 0 active maintainers in the last 3 months. That is strong evidence of currently stalled development, although the repository is not archived.

Release historycaution

There have been 37 releases over about 3 years, but none in the last 12 months; the latest release was about 16 months ago. This points to materially reduced maintenance despite a previously regular cadence.

Repo issue activitycaution

Only 2 issues were opened and no issues or pull requests were closed or merged in the last month, alongside 134 open issues. This suggests limited recent capacity to resolve maintenance work.

Security policycaution

The repository has no published security policy. That reduces transparency for reporting and handling vulnerabilities, though it does not by itself show that the package is unsafe.

Version stabilitycaution

The assessed release is version 6.7.0-alpha.0, so it is explicitly a prerelease and may carry compatibility risk. The recent prerelease share is only 10%, which partly limits concern.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10313 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
@react-awesome-query-builder/antd is vulnerable to Cross-site Scripting (XSS) in versions 6.3.0 - 6.6.14.
6.3.0 - 6.6.14
Medium

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
lodash
Version ^4.17.21
—
—
rc-picker
Version ^4.5.0
—
—
prop-types
Version ^15.8.1
—
—
@babel/runtime
Version ^7.27.0
—
—
@react-awesome-query-builder/ui
Version ^6.7.0-alpha.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
3 years ago
Unpacked Size
0.6 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform