react-chartjs-2

Name lookalikedanger

The package is reported to borrow the identity of react-is, with borrows_lookalike_identity true, despite zero artifact overlap; this is strong evidence that consumers may have intended to install react-is instead.

Build provenancecaution

No build attestation or trusted-publisher provenance was found, so consumers have less independently verifiable evidence connecting the published artifact to its source.

Release historycaution

This is a mature package released since 2016 with 86 releases, but only 1 release appeared in the last 12 months, indicating a slower current cadence.

Repo commit activitycaution

The repository had 0 commits and 0 active maintainers in the last 3 months, which raises maintenance and abandonment concerns. The repository was pushed recently, but that does not compensate for the measured lack of recent commit activity.

Security policycaution

The repository has no security policy, leaving vulnerability reporting and response expectations undocumented.