react-shallow-renderer

Release historydanger

The package has 13 releases since 2015, but none in the last 12 months and the latest release was in April 2022. This is meaningful evidence of aging maintenance for a dependency.

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, indicating that current maintenance capacity is weak even though the repository is not archived.

Build provenancecaution

No build attestation or trusted-publisher provenance is present, leaving publication origin less transparent. This is a supply-chain transparency gap, not evidence that the release is unsafe.

Repo issue activitycaution

There were no new or closed issues or pull requests in the last month, while 18 pull requests remain open. This supports the conclusion that maintenance response is currently limited.

Repo toolingcaution

The repository uses Rollup, Babel, and npm scripts, showing an established build process, but it has no security-scanning tools. The tooling is adequate while security automation is a modest hygiene gap.