Package Health

@react-awesome-query-builder/core

User-friendly query builder for React. Core

Latest 6.7.0-alpha.0NPMNPM

58%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

38

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

89

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

75

Are you affected? Scan for Free

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last 3 months. Together with no registry releases in the last year, this is the strongest maintenance concern.

Maintainerscaution

Only one registry account has publish access. The repository is user-owned rather than organization-backed, so the narrow publisher base is a meaningful continuity risk.

Project backingcaution

The package namespace and repository are linked to the same user-owned project, providing coherent ownership context, but no organization backing is shown to compensate for the single publisher.

Release historycaution

The package has 37 releases over about 3 years, but none in the last 12 months; the latest registry release was about 16 months ago. This materially raises staleness risk despite the earlier regular cadence.

Repo issue activitycaution

There are 134 open issues and 28 open pull requests, with no issues or pull requests closed or merged in the last month. This suggests unresolved maintenance demand.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2025-10312 Pre-CVE
Found by Aikido Intel before public disclosure or CVE publication.
@react-awesome-query-builder/core is vulnerable to Prototype Pollution in versions 6.3.0 - 6.6.14.
6.3.0 - 6.6.14
Medium

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
clone
Version ^2.1.2
—
—
lodash
Version ^4.17.21
—
—
moment
Version ^2.30.1
—
—
i18next
Version ^23.11.5
—
—
spel2js
Version ^0.2.8
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
3 years ago
Unpacked Size
2.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform