react-idle-timer

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported, so consumers have limited evidence connecting the artifact to its source build.

Maintainerscaution

Only one registry account has publish access, and the repository owner is an individual rather than an organization. Recent release activity partly offsets the resulting concentration risk, but the publishing base remains thin.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. A recent release provides some compensation, but the absence of current source activity is a meaningful maintenance concern.

Repo issue activitycaution

The repository has 33 open issues and 8 open pull requests, but recorded zero new or closed issues and zero merged pull requests in the last month. This indicates limited recent project responsiveness.

Repo toolingcaution

The repository uses TypeScript, npm scripts, esbuild, and SWC, showing an established build process. No security-scanning tools are reported, leaving a modest hygiene gap.