react-smooth

Name lookalikedanger

The package is flagged as borrowing the identity of the far more established react-is, despite no artifact overlap or self-described fork. This is strong evidence that consumers may have intended to install react-is instead.

Release historycaution

The package has 56 releases but none in the last 12 months; its latest registry release was on December 16, 2024. The long history helps, but the current release cadence is inactive.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last 3 months. This indicates limited recent maintenance capacity, even though the repository was pushed more recently overall.

Type declarationscaution

No type declarations are published, which makes this React library less convenient and less safe to integrate for TypeScript consumers. It is an ergonomics gap rather than a severe supply-chain risk.

Workflow auditcaution

The single workflow was fully analyzed with no dangerous triggers, untrusted checkouts, or audit findings, but both of its action references are unpinned. That leaves the build exposed to action changes over time.