LaunchDarkly SDK for React
63%
Total Score
100
100
95
88
100
The release includes a substantial README, while the source repository has tests, a changelog, and GitHub release support. However, the README explicitly directs consumers to the renamed @launchdarkly/react-sdk, making this package a poor choice for new dependencies.
All 5 workflows were analyzed with no audit findings, no untrusted checkouts, and no script injection. However, 11 of 14 action references are unpinned and one workflow has top-level write permissions, creating a moderate reproducibility and workflow-hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
lodash.camelcase Version ^4.3.0 | — | — |
hoist-non-react-statics Version ^3.3.2 | — | — |
launchdarkly-js-client-sdk Version ^3.9.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.