@testing-library/react

Repo commit activitycaution

Only two commits from two active maintainers were recorded in the last three months, which is a low maintenance signal, though it is partly offset by the recent release and release notes.

Repo toolingcaution

The repository uses TypeScript, npm scripts, and Babel for builds, but no security scanning tools were detected, leaving a security-process gap.

Security policycaution

No SECURITY.md or other repository security policy was found, reducing transparency for vulnerability reporting, although this is not evidence of abandonment.

Token permissionscaution

Workflow permissions are explicitly declared, but one workflow has top-level write permissions; this is a mild workflow-hardening concern rather than a demonstrated unsafe behavior.