react-color

Release historydanger

The package has 77 releases since August 2015, but no registry release in nearly six years. That long release gap is a substantial maintenance concern despite the historically active cadence.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the old latest release, this is strong evidence of stalled maintenance.

Lifecycle scriptscaution

A prepublish lifecycle script adds some build-time supply-chain complexity, although this signal alone does not show unsafe behavior.

Maintainerscaution

Only one registry account has publish access, creating a thin publishing base and greater continuity risk. The linked repository is user-owned rather than organization-backed, so no compensating organizational backing is shown.

Project backingcaution

The package maps to a user-owned repository rather than an organization-owned project. With only one registry maintainer, this provides limited visible backing for long-term continuity.