An enterprise-class UI design language and React components implementation
93%
Total Score
healthy
Long-lived, actively maintained library with strong project backing; only minor workflow-audit gaps temper an otherwise healthy release.
No build attestation or trusted-publisher identity is recorded, leaving publication provenance less transparent than it could be despite the package's strong maintenance evidence.
The library declares 48 runtime dependencies and 169 development dependencies, a sizable profile expected for a broad UI component suite but still adding maintenance surface.
A prepare install-time script is present, adding some install complexity, but this is not by itself evidence of poor project health.
All 116 analyzed action references are pinned, 27 workflows use read-only permissions, and no untrusted checkouts or script injections were found. However, only 30 of 33 workflows were analyzed, and one high-confidence low-severity adhoc-packages finding installs outside a lockfile.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
clsx Version ^2.1.1 | — | — |
dayjs Version ^1.11.11 | — | — |
@babel/runtime Version ^7.29.2 | — | — |
@ant-design/icons Version ^6.3.4 | — | — |
throttle-debounce Version ^5.0.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.