downshift
🏎 A set of primitives to build simple, flexible, WAI-ARIA compliant React autocomplete, combobox or select dropdown components.
82%
Total Score
100
100
100
67
Health Score Breakdown
The repository has no SECURITY.md policy, leaving vulnerability-reporting guidance less explicit, though the mature repository and active release record provide compensating maintenance evidence.
The single workflow analyzed completely, but all 10 action references are unpinned and the audit found a high-confidence unsound-contains condition. There are no untrusted checkouts or script-injection findings, so this is a workflow-hygiene caution rather than a severe adoption blocker.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 tslib Version ^2.8.1 | — | — |
react-is Version ^18.2.0 | — | — |
prop-types Version ^15.8.1 | — | — |
@babel/runtime Version ^7.28.6 | — | — |
compute-scroll-into-view Version ^3.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 months ago
- Created
- 9 years ago
- Unpacked Size
- 3 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.