react-content-loader

Build provenancecaution

No build attestation or trusted-publisher provenance is present, reducing publication transparency, though this is a transparency gap rather than evidence that the release is unsafe.

Maintainerscaution

Only one registry account has publish access, leaving a thin publishing base. The repository is also owned by a single user, so no organizational backing is shown to compensate for that concentration.

Project backingcaution

The source repository is owned by an individual account rather than an organization, so the available evidence does not show institutional backing to reduce continuity risk.

Repo commit activitycaution

There were no commits and no active maintainers in the last three months. This recent pause is a meaningful maintenance concern despite the new release and long history.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, which is consistent with the quiet recent commit activity and offers no evidence of active ongoing maintenance.