react-dnd-touch-backend

Release historydanger

The latest registry release was in April 2022, with no releases in the last 12 months. The long release gap raises maintenance and compatibility risk despite the package's substantial release history.

Repo commit activitydanger

There were no commits and no active maintainers in the last three months. Combined with the old registry release, this materially increases the risk that the package is no longer actively maintained.

Workflow auditdanger

All 11 analyzed action references are unpinned, and the audit found high-confidence template-injection findings in fix-dependabot.yml. Workflows had no top-level permissions block, which is acceptable on its own, but the unpinned actions and injection findings lower workflow hygiene.

Build provenancecaution

No build attestation or trusted-publisher provenance is available, leaving publication origin less transparent. This is a supply-chain transparency gap, but not evidence that the release is unsafe.

Repo issue activitycaution

The repository has 444 open issues and 30 open pull requests, but no issues or pull requests were opened or closed in the last month. This indicates limited recent project activity.