eslint-config-react-app

Build provenancecaution

No build attestation or trusted-publisher provenance is present, so consumers have less verifiable evidence about how this release was published.

Dependency profilecaution

The configuration declares 14 runtime dependencies, creating a relatively broad dependency surface for a shareable lint configuration and increasing maintenance exposure.

Release historycaution

The package has 85 releases over roughly 10 years, but it had no releases in the last 12 months despite a previously regular median interval of about 7 days. This points to a meaningful maintenance slowdown.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Together with the release gap, this is a clear maintenance concern.

Repo package mentioncaution

The repository name does not match the package and its README does not mention the package. This is a caution because the package's ownership link is less directly demonstrated, although the repository is organization-backed.