react-onclickoutside

Name lookalikedanger

The package is flagged as borrowing the identity of the far more established react-is, with 1.3 billion monthly downloads versus 8.1 million and explicit identity borrowing. Although artifact overlap is zero, this is strong evidence of consumer confusion and a serious supply-chain concern.

Project backingcaution

The source repository is owned by an individual account rather than an organization. That provides less visible institutional backing, though the repository is clearly linked to the package.

Release historycaution

The project has a long history and 80 releases, but it has made no release in the last 12 months. That recent pause lowers confidence in ongoing maintenance despite its mature release record.

Repo commit activitycaution

There were no commits and no active maintainers in the last 3 months. The repository was pushed in April 2025, but the current inactivity still indicates slowing maintenance.

Repo issue activitycaution

There are only four open issues and two open pull requests, with no new or closed activity in the last month. The small backlog is manageable, but the absence of recent movement is mildly concerning.