react-router-config

Release historydanger

The package has had no registry release in nearly seven years, despite 18 releases overall; this is a substantial freshness and compatibility concern for a dependency.

Repo package mentioncaution

The repository name does not match the package and its README does not mention react-router-config, so package-to-source ownership is less transparent even though a monorepo subpackage could explain the mismatch.

Type declarationscaution

No type declarations are included, which reduces integration ergonomics for TypeScript consumers of this JavaScript library.

Workflow auditcaution

All 19 workflows were analyzed, but high-confidence template-injection findings and repeated ad hoc package installs indicate workflow hygiene concerns; no untrusted checkout or script-injection sink was reported.