react-copy-to-clipboard

Build provenancecaution

The release has no attestation, trusted publisher, or staged-publishing evidence. This is a transparency and verification gap, though it is not severe enough to make the release unfit on its own.

Maintainerscaution

Only one registry publisher, nkbt, is listed. That is a thin publishing base and creates more continuity risk if that person becomes unavailable.

Project backingcaution

The repository is owned by an individual GitHub user rather than an organization, so the single-publisher finding is not offset by visible organizational backing.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. This is the clearest maintenance concern, although the package had a release and repository push on March 7, 2026.

Repo issue activitycaution

There was one new issue in the last month, with no issues or pull requests closed or merged. This shows limited current project activity but is not conclusive evidence of abandonment.