react-dnd

Build provenancecaution

No registry build attestation or trusted-publisher provenance is available, leaving publication origin less independently verifiable. This is a transparency gap, but not by itself evidence that the release is unsafe.

Release historycaution

The package has 140 releases since 2014, but its latest registry release was about four years ago and there were no releases in the last 12 months. The long history supports maturity, while the current release gap is a maintenance concern.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. Although it was pushed in July 2025 and is not archived, the recent inactivity increases abandonment risk for a release already about four years old.

Repo issue activitycaution

There were no new or closed issues and no new or merged pull requests in the last month, alongside 444 open issues. This suggests limited current project activity and adds to the maintenance concern.

Repo toolingcaution

The repository uses TypeScript, Turbo, and npm scripts for builds, indicating an established build setup, but no security scanning tools were detected.