@react-email/button

Registry deprecationdanger

npm marks the entire package as deprecated with the message “Package no longer supported,” and provides no replacement. This is a decisive adoption risk despite the active source repository.

Repo toolingcaution

The project uses established build and test tooling, including TypeScript and Vitest. No security scanning tools were detected, which is a minor hygiene gap but not decisive here.

Version stabilitycaution

Version 0.2.1 is not a stable major version, and half of recent releases were prereleases. This adds some compatibility uncertainty but is secondary to the package-level deprecation.

Workflow auditcaution

All 11 workflows were analyzed with no untrusted checkout or script-injection sink, and 9 use read-only permissions. The audit still found a high-confidence template-injection issue and an informational trusted-publishing finding, while one workflow has top-level write permissions.