Resize observer for React
72%
Total Score
100
89
50
A prepare install-time script is present, adding build or installation behavior that deserves awareness, but this signal alone does not show harmful or unreliable behavior.
The package has 25 releases since September 2019, but no registry release in the last 12 months; this weakens release confidence despite recent repository activity.
The repository name does not match the package name and its README does not mention rc-resize-observer, so the package-to-source linkage is less transparent than expected.
All five workflows were analyzed with no audit findings or untrusted checkout and script-injection paths. However, 5 of 10 action references are unpinned and 3 workflows grant top-level write permissions, creating moderate hygiene concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rc-util Version ^5.44.1 | — | — |
classnames Version ^2.2.1 | — | — |
@babel/runtime Version ^7.20.7 | — | — |
resize-observer-polyfill Version ^1.5.1 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.