Modern and scalable routing for React applications
91%
Total Score
healthy
Frequent releases and active organization-backed development make this a well-maintained release.
The repository name does not match the package and its README does not mention the package, which is a transparency concern; the organization-backed router monorepo and package file tree partly explain the subpackage layout.
The repository has no published security policy, leaving disclosure and response expectations less transparent despite its active development and security scanning.
All nine workflows were analyzed with no high- or medium-severity findings, no untrusted checkouts, and all 33 action references pinned. Three high-confidence low-severity adhoc-package findings and three workflows with top-level write permissions are minor hygiene concerns.
| Dependency | Last Release | Score |
|---|---|---|
zod Version ^4.5.4 | — | — |
jiti Version ^2.7.0 | — | — |
prettier Version ^3.9.6 | — | — |
@babel/types Version ^7.29.8 | — | — |
magic-string Version ^0.30.21 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.