Interactive react component for displaying javascript arrays and JSON objects.
43%
Total Score
25
71
50
The package borrows the identity of the far more established react-is, with 1.37 billion monthly downloads versus about 5.3 million and borrows_lookalike_identity marked true. This is strong evidence that consumers may have intended to install react-is instead.
The latest registry release was about 5 years ago, with no releases in the last 12 months. Its long history and 111 releases provide maturity, but the current release cadence indicates abandonment risk.
The repository recorded no commits and no active maintainers in the last 3 months, reinforcing the lack of recent registry releases. This materially lowers confidence in ongoing maintenance.
There were 157 open issues and 35 open pull requests, with no new or closed issues or merged pull requests in the last month. That backlog and inactivity suggest limited responsiveness.
The repository has no published security policy, leaving vulnerability-reporting expectations unclear. This is a transparency gap, though it is less severe than the maintenance concerns.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
flux Version ^4.0.1 | — | — |
react-base16-styling Version ^0.6.0 | — | — |
react-lifecycles-compat Version ^3.0.4 | — | — |
react-textarea-autosize Version ^8.3.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.