react-confetti

Release historycaution

The project has 45 releases since 2016, but has made no registry release in the last 12 months; the latest release is 6.4.0 from March 2025. This indicates slowing delivery, though its long release history provides maturity.

Repo commit activitycaution

The repository recorded 0 commits and 0 active maintainers in the last 3 months, which is a maintenance concern. The repository was pushed more recently, so this is evidence of a quiet period rather than abandonment by itself.

Security policycaution

The repository has no security policy and no security-scanning tools. This is a transparency and maintenance gap, though it is moderated by the clean workflow audit.

Workflow auditcaution

Both workflows were analyzed successfully with no injection or high-severity findings, but all 6 action references are unpinned. The absence of top-level permissions blocks is acceptable here because no workflow has top-level write access.