@react-email/html

Registry deprecationdanger

npm marks the entire package deprecated with the message “Package no longer supported,” making this release unsuitable for a new dependency despite other positive evidence.

Release historycaution

The package has existed for about four years with 16 releases and a median interval of about 35 days, but only one release appeared in the last 12 months, indicating slowing package-level activity.

Repo toolingcaution

The project uses TypeScript, Vitest, Turbo, Rollup, Vite, and npm scripts, showing structured build and test tooling; no automated security scanning was detected.

Version stabilitycaution

Version 0.0.12 is not in a stable major series, so its API carries more compatibility risk than a mature 1.x release; it is not a prerelease, which partly offsets that concern.

Workflow auditcaution

All 11 workflows were analyzed with no untrusted checkout, script injection, or unpinned action references. However, the audit found a high-confidence template-injection issue and trusted publishing with long-lived credentials; the latter warrants caution, while the template issue is a workflow hygiene concern without a dangerous trigger or sink shown here.