react-query
Hooks for managing, caching and syncing asynchronous and remote data in React
68%
Total Score
100
100
94
90
50
Health Score Breakdown
No build attestation or trusted-publisher metadata is available, leaving publication provenance less transparent. This is a supply-chain transparency gap, but it is offset partly by the active repository and disciplined workflow configuration.
The package has a long history with 491 releases, but its latest registry release was over three years ago and it had no releases in the last 12 months. This makes the assessed release stale despite the project's current repository activity.
The repository has no published security policy, leaving vulnerability-reporting and response expectations unclear. The repository's security scanning provides some compensation but does not replace a policy.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 match-sorter Version ^6.0.2 | — | — |
@babel/runtime Version ^7.5.5 | — | — |
broadcast-channel Version ^3.4.1 | — | — |
Weekly Downloads
Info
- Last Published
- 3 years ago
- Created
- 12 years ago
- Unpacked Size
- 2.2 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.