react-infinite-scroll-component

Build provenancecaution

The release has no build attestation or trusted-publisher provenance, leaving publication origin less independently verifiable.

Lifecycle scriptscaution

The package runs prepare and prepublish lifecycle scripts, which increase installation and publication complexity compared with a package containing no lifecycle hooks.

Project backingcaution

The repository is owned by an individual rather than an organization, so the small three-account registry maintainer list has less organizational backing to offset single-owner continuity risk.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers over the last three months. The seven releases in the last year and the recent release provide partial compensation, but do not remove the maintenance concern.

Repo issue activitycaution

There were no new or closed issues in the last month and no merged pull requests, although two pull requests were opened; this suggests limited recent repository throughput.