react-intersection-observer

Name lookalikedanger

The signal says the package borrows the identity of the much larger `react-is` package, despite zero artifact overlap and no README claim of being a fork. Consumers may therefore select it when they intended `react-is`.

Maintainerscaution

Only one registry account has publish access, which creates publishing concentration, though repository activity shows three active contributors and does not indicate abandonment.

Project backingcaution

The repository is owned by an individual rather than an organization, so the concentrated maintainer and publishing structure represents a genuine continuity risk.

Repo bus factorcaution

The top contributor made about 77% of recent commits, creating concentration risk, but two additional contributors remained active during the same period.

Repo toolingcaution

The repository uses established build tooling, but no security-scanning tools were detected. This is a transparency gap, partially offset by the repository's provenance and workflow controls.