framer-motion 13.2.0 appears to be a healthy, mature dependency: it has a long release history with 90 releases in the last 12 months, is not deprecated, is backed by an active non-archived organization repository, and shows substantial recent commit and issue/PR activity. The package is MIT-licensed, includes TypeScript declarations, has a focused runtime dependency profile, and its repository contains tests and a changelog even though those are not packaged. Remaining concerns are the absence of build attestation and security scanning, a missing security policy, and a workflow without top-level token permissions; these reduce transparency and hardening but do not outweigh the strong maintenance evidence.
90%
Total Score
100
100
95
70
50
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
tslib Version ^2.4.0 | — | — |
motion-dom Version ^13.2.0 | — | — |
motion-utils Version ^13.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.