Spectrum UI components in React
87%
Total Score
healthy
Active Adobe-backed maintenance outweighs the monorepo-link ambiguity and fully unpinned workflow actions.
The linked repository name does not match the package and its README does not mention @react-types/shared; although a name mismatch is normal for a monorepo, the lack of a README mention leaves some package-to-repository ambiguity.
All 8 workflows were analyzed successfully with no audit findings, no untrusted checkouts, and no script injection. However, all 15 action references are unpinned, leaving avoidable update and integrity risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.