@reactflow/core
Core components and util functions of React Flow.
72%
Total Score
88
100
83
88
50
Health Score Breakdown
No build attestation or trusted-publisher provenance is present, leaving publication and build origin less independently verifiable.
The package has 53 releases and historically released about every 7 days, but it has had no registry release in the last 12 months and its latest release was in June 2024. That makes this release materially stale despite active repository work.
One contributor made about 60% of recent commits, but 10 additional contributors were active, so the concentration is a manageable caution rather than a severe single-maintainer risk.
The linked repository name does not match @reactflow/core and its README does not mention the package, so the package-to-repository relationship is not clearly demonstrated; this is a transparency concern even though monorepo subpackages can legitimately differ in name.
The repository uses established build tools and TypeScript, but no security-scanning tools were detected, leaving a modest security-process gap.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 d3-drag Version ^3.0.0 | — | — |
d3-zoom Version ^3.0.0 | — | — |
zustand Version ^4.4.1 | — | — |
classcat Version ^5.0.3 | — | — |
@types/d3 Version ^7.4.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 4 years ago
- Unpacked Size
- 0.9 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.