@react-email/head

Registry deprecationdanger

The entire package is deprecated on npm with the message “Package no longer supported,” which is a severe adoption risk even though no replacement is named.

Release historycaution

The package has 20 releases over about four years and a release within the last year, showing prior maintenance, but only one release in the last 12 months is weaker than its earlier cadence.

Repo toolingcaution

The repository uses established build and test tooling, but no security-scanning tools were detected, leaving a modest transparency gap.

Version stabilitycaution

Version 0.0.13 is not a stable major release, so the package may still carry pre-1.0 compatibility risk; it is not marked as a prerelease.

Workflow auditcaution

All 11 workflows were analyzed with no untrusted checkout or script-injection findings, and 24 of 24 action references are pinned. The audit still identified a high-confidence template-injection issue and an informational trusted-publishing finding, which warrant workflow hygiene caution.