react-reconciler 0.34.0 appears to be a well-supported and transparently published package backed by an actively maintained organization-owned React repository. It has extensive release history, current repository activity, broad contributor participation, build provenance, a license file, security policy, and no install-time lifecycle scripts. The main adoption concern is intentional API instability: the package describes itself as experimental, uses a non-stable major version, and has a very high recent prerelease share. The linked repository also does not match the package name or mention it in its README, which weakens package-to-source traceability, although the repository's React organization backing and substantial activity provide strong compensating evidence.
88%
Total Score
100
100
89
100
100
The linked repository neither matches the package name nor mentions react-reconciler in its README, weakening direct package-to-repository traceability. The mismatch is partly mitigated because the repository is the organization-owned React monorepo and the package tree and documentation describe react-reconciler directly.
The package is not a stable major release, 95% of recent releases are prereleases, and its README explicitly describes the API as experimental and unstable. This is a meaningful compatibility risk for dependents, even though it is consistent with the package's stated purpose.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
scheduler Version ^0.28.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.