react-doctor
Your agent writes bad React. This catches it
82%
Total Score
healthy
Active project with 887 releases, recent commits, and release provenance, though its pre-1.0 status and workflow hygiene add caution.
Telemetry detected in 1 version
Health Score Breakdown
The project uses established build tooling, but no security scanning tools were detected. This is a modest transparency and hygiene gap rather than a direct adoption blocker.
The repository has no published security policy, leaving vulnerability reporting and response expectations unclear.
Version 0.9.18 is not a prerelease, but 95% of recent releases were prereleases and the package remains below 1.0. That indicates a less stable compatibility track than a mature major version.
All eight workflows were analyzed with no untrusted checkout or script-injection findings, and seven use read-only permissions. However, 28 of 41 action references are unpinned, and high-confidence adhoc package installation appears in several workflows; the audit also reports trusted-publishing usage, so workflow hygiene is a caution.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 conf Version ^15.1.0 | — | — |
jiti Version ^2.7.0 | — | — |
yaml Version ^2.9.0 | — | — |
bippy Version ^0.6.1 | — | — |
oxlint Version >=1.81.0 <1.82.0 | — | — |
Weekly Downloads
Info
- Last Published
- 3 days ago
- Created
- 8 months ago
- Unpacked Size
- 9.4 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.