@react-email/container

A layout component that centers all the email content

Latest 0.0.16

NPM

24%

Total Score

critical

Unfit to use: npm marks this package as no longer supported, despite an active source repository.

Using this package? Scan for Free

Health Score Breakdown

Registry deprecation

The entire package is marked deprecated with the message “Package no longer supported,” and no replacement is specified. This is a severe direct warning against taking a dependency on this release.

Build provenance

No build provenance attestation or trusted publisher is recorded for this release, leaving publication origin less transparent. This is a supply-chain hygiene weakness, though the active repository provides some compensating context.

Repo tooling

The project uses TypeScript, Vitest, Turbo, Rollup, and Vite, showing a substantial build and test toolchain. No repository security-scanning tool was detected, which is a minor transparency gap.

Workflow audit

All 11 workflows were analyzed with no untrusted checkout or script-injection trigger found, and 23 of 24 action references are pinned. The audit still reports a high-confidence template-injection finding and an informational trusted-publishing finding, so workflow hygiene is not clean.