React component wrapper around PhotoSwipe
68%
Total Score
63
100
95
50
100
A prepare script runs during installation, adding some install-time behavior. This is a modest hygiene concern, although the release has npm provenance and no runtime dependencies.
All 5 commits in the last 3 months came from one contributor, creating a meaningful continuity risk even though the repository is organization-owned.
Five commits were made in the last 3 months, so work has not stopped, but the activity is modest and concentrated in a single active maintainer.
The repository has 15 open issues and 14 open pull requests, but it closed no issues or pull requests and merged no pull requests in the last month, limiting evidence of responsive maintenance.
The project uses TypeScript, Babel, webpack, and npm scripts for builds, but no security scanning tools were detected, leaving a security-process gap.
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2025-10636 Pre-CVE Found by Aikido Intel before public disclosure or CVE publication. react-photoswipe-gallery is vulnerable to Cross-site Scripting (XSS) in versions 2.0.0 - 3.1.1. | 2.0.0 - 3.1.1 | Medium |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.