Modern and scalable routing for React applications
92%
Total Score
healthy
Frequent stable releases, active organization backing, and attested builds outweigh minor workflow and policy gaps.
The repository name does not match the package and its README does not mention the package, which creates a caution that the package-to-repository relationship is less explicit; the organization backing and monorepo context partly compensate.
No repository security policy was found, leaving vulnerability-reporting expectations less transparent; this is a minor governance gap rather than evidence of abandonment.
All nine workflows were analyzed with no high- or medium-confidence findings, no untrusted checkouts, and all 33 action references pinned. Three high-confidence low-severity adhoc-package findings and top-level write permissions in three workflows are minor hygiene concerns.
| Dependency | Last Release | Score |
|---|---|---|
zod Version ^4.5.4 | — | — |
jiti Version ^2.7.0 | — | — |
prettier Version ^3.9.6 | — | — |
@babel/types Version ^7.29.8 | — | — |
magic-string Version ^0.30.21 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.