React Virtual List Component
82%
Total Score
100
100
89
67
The package has 142 releases since July 2019, but none in the last 12 months. Recent repository commits and six active contributors show ongoing work, so this is a cadence concern rather than abandonment evidence.
The repository name does not match the package name and its README does not mention rc-virtual-list. Although name differences are normal for subpackages, the lack of any README mention leaves package ownership less transparent.
No repository security policy was found. This is a transparency gap for reporting vulnerabilities, but it does not by itself indicate abandonment or unsafe maintenance.
All four workflows were analyzed with no findings or untrusted sinks. However, two workflows grant top-level write permissions and four of nine action references are unpinned, creating a mild reproducibility and permission-hygiene concern.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
rc-util Version ^5.36.0 | — | — |
classnames Version ^2.2.6 | — | — |
@babel/runtime Version ^7.20.0 | — | — |
rc-resize-observer Version ^1.0.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.