eslint-plugin-react

Release historycaution

This is a mature package with 216 releases over nearly 12 years, but the latest registry release was about 17 months ago and there were no releases in the last 12 months, which raises maintenance concerns.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months, a meaningful sign of currently slowed maintenance despite the repository not being archived.

Repo issue activitycaution

There are 285 open issues and 87 open pull requests, with limited recent closure activity; this suggests some backlog and contributes modest maintenance concern.

Workflow auditcaution

All 10 workflows were analyzed with no untrusted checkout or script-injection paths, but all 36 action references are unpinned. The high-confidence template-injection finding in npm-publish is a workflow hygiene concern; its path is separate from the pull_request_target workflows, so it is not treated as a severe supply-chain finding.