Package Health/react-server-dom-turbopack

react-server-dom-turbopack

React Server Components bindings for DOM using Turbopack. This is intended to be integrated into meta-frameworks. It is not intended to be imported directly.

Latest 19.3.0

NPM

88%

Total Score

Maintainer Stability

100

Dependencies

100

Maturity

Supply Chain

100

Attestations

100

Are you affected? Scan for Free

Health Score Breakdown

Repo package mention

The repository name does not match the package name and its README does not mention the package. A name mismatch can be normal for a monorepo, but the absence of a README mention means the package-to-repository association should be verified and lowers transparency.

Version stability

The assessed version is a stable major release and not marked prerelease, but 95% of recent releases are prereleases and the package README describes the bindings as experimental, so API stability deserves caution.

Vulnerabilities

Title	Versions	Severity
AIKIDO-2026-557595 react-server-dom-turbopack is vulnerable to Denial of Service in versions 19.0.0 - 19.0.7, 19.1.0 - 19.1.8 and 19.2.0 - 19.2.7.	19.0.0 - 19.0.719.1.0 - 19.1.819.2.0 - 19.2.7	High
AIKIDO-2026-10094 react-server-dom-turbopack is vulnerable to Denial of Service (DoS) in versions 19.0.0 - 19.0.3, 19.1.0 - 19.1.4 and 19.2.0 - 19.2.3.	19.0.0 - 19.0.319.1.0 - 19.1.419.2.0 - 19.2.3	High
AIKIDO-2025-10868 react-server-dom-turbopack is vulnerable to Remote Code Execution (RCE) in versions 19.0.0 - 19.0.2, 19.1.0 - 19.1.3 and 19.2.0 - 19.2.2.	19.0.0 - 19.0.219.1.0 - 19.1.319.2.0 - 19.2.2	Critical