create-react-class

Release historycaution

The latest registry release was published in October 2020, with no releases in the last 12 months. This is a meaningful freshness concern even though the source project remains active.

Repo package mentioncaution

The repository name does not match create-react-class and its README does not mention the package, so the linkage is not explicit. The mismatch is understandable for a React monorepo, but the missing mention still warrants caution.

Workflow auditcaution

All 26 workflows were analyzed with no untrusted checkouts or script injections, and 25 use read-only permissions. However, 196 of 203 action references are unpinned, which is a meaningful reproducibility and supply-chain hygiene gap.