Utilities for creating robust overlay components
18%
Total Score
50
50
83
The signal says the package borrows the identity of the much more established react-is, with 1.37 billion monthly downloads versus 7.9 million for this package. Although artifact overlap is zero and the names are functionally unrelated, the identity signal is still a serious adoption risk.
The package has had no releases in the last four years, despite 86 releases historically; this strongly indicates the release line is inactive.
The repository recorded zero commits and zero active maintainers in the last three months, providing no evidence of ongoing maintenance capacity.
The linked repository is archived, a severe abandonment signal even though it was pushed recently; archived projects are not a dependable maintenance base.
There were no new or closed issues and no merged pull requests in the last month, while 56 issues and 58 pull requests remain open; this suggests stalled project activity.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
warning Version ^4.0.3 | — | — |
prop-types Version ^15.7.2 | — | — |
dom-helpers Version ^5.2.0 | — | — |
@babel/runtime Version ^7.13.8 | — | — |
@popperjs/core Version ^2.11.6 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.