react-resize-detector

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, so consumers cannot independently verify how the registry artifact was produced. The package's small artifact and simple build tooling partly limit the concern.

Project backingcaution

The repository is owned by an individual account rather than an organization, so there is no organizational backing signal to compensate for the thin recent activity.

Release historycaution

The package has a long history and 125 releases, but it has had no releases in the last 12 months despite a median interval of about 4 days. That sharp slowdown is a meaningful maintenance concern.

Repo commit activitycaution

There were zero commits and zero active maintainers in the last 3 months. This weakens evidence of ongoing maintenance, although it does not by itself prove abandonment.

Repo issue activitycaution

There are only two open issues and no recent issue or pull-request activity. This is consistent with a quiet project but offers little evidence of active support.