react-json-view-lite

Name lookalikedanger

The package is flagged as borrowing the identity of react-is, which has far greater download volume and more stable releases; it is not described as a fork. This creates a serious risk that consumers may have selected the wrong package.

Lifecycle scriptscaution

A prepare lifecycle script is present, so installation or publication may run build-related commands. This is a review point, though the signal does not show a dangerous script or behavior.

Maintainerscaution

Only one registry account has publish access. The linked repository is user-owned rather than organization-owned, so there is little visible publishing redundancy if that maintainer becomes unavailable.

Release historycaution

The project has 28 releases over roughly five years, but none in the last 12 months. That recent release gap lowers confidence in ongoing maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Although the repository is not archived, this is meaningful evidence of currently inactive development.