React input-number component
84%
Total Score
100
100
95
50
A prepare install-time script is present, adding build-time execution during installation and a small supply-chain and reproducibility concern.
The package has 220 releases over more than 11 years, but recorded registry releases fell to zero in the last 12 months; active repository commits partly compensate for the registry pause.
No repository security policy was found, leaving vulnerability reporting and response expectations less explicit.
All five workflows were analyzed with no audit findings or untrusted checkouts, but five of ten action references are unpinned and three workflows grant top-level write permissions; without an untrusted trigger or sink, this remains a hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rc-util Version ^5.40.1 | — | — |
rc-input Version ~1.8.0 | — | — |
classnames Version ^2.2.5 | — | — |
@babel/runtime Version ^7.10.1 | — | — |
@rc-component/mini-decimal Version ^1.0.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.