react
React is a JavaScript library for building user interfaces.
86%
Total Score
healthy
Active, well-supported release with strong provenance, but nearly all workflow actions are unpinned.
Health Score Breakdown
The package ships no type declarations, which is a consumer-ergonomics gap for typed applications, but it does not indicate abandonment or publishing risk.
All 26 workflows were analyzed and 25 use read-only permissions, with no untrusted checkouts or script-injection findings. However, 196 of 203 action references are unpinned, and high-confidence template-injection findings remain workflow hygiene concerns.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
CVE-2013-7035 react is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.4.0 - 0.4.2 and 0.5.0 - 0.5.2. | 0.4.0 - 0.4.20.5.0 - 0.5.2 | Medium |
Package versions
Direct Dependencies
No direct dependencies.
Weekly Downloads
Info
- Last Published
- 2 days ago
- Created
- 14 years ago
- Unpacked Size
- 0.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.