hack into react internals
78%
Total Score
63
100
89
67
100
Only one registry account has publish access. This is a concentration risk, although the linked repository shows ongoing activity from that same maintainer.
One contributor made 100% of the 57 commits in the last three months. The repository owner is an individual rather than an organization, so there is no demonstrated organizational handoff capacity.
There were 57 commits in the last three months, but all came from one active maintainer, making continuity dependent on a single person.
The project uses Vite, TypeScript, and npm scripts, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than evidence of abandonment.
No security policy was found in the repository, leaving vulnerability-reporting expectations unspecified.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
@types/react-reconciler Version ^0.33.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.