@react-dnd/asap

Release historycaution

The latest release was published in April 2022, with no releases in the last 12 months. This is a meaningful freshness and maintenance concern despite the package having a stable release history.

Repo commit activitycaution

The repository had zero commits and zero active maintainers in the last three months. Its push history shows the repository is not archived, but recent inactivity still raises maintenance risk for this release.

Security policycaution

The repository has no published security policy, reducing transparency about vulnerability reporting and maintenance expectations. The package otherwise has clear licensing and a substantial organization-backed repository.

Workflow auditcaution

All 11 analyzed action references are unpinned, and the audit found high- and medium-confidence template-injection findings. No dangerous trigger or untrusted checkout was observed, so this is workflow hygiene risk rather than a severe standalone concern.