react-test-renderer

Package scaffoldingdanger

The package README explicitly says react-test-renderer is deprecated, no longer maintained, and will be removed in a future version; it recommends testing-library alternatives. Repository tests, changelog, and release notes show project maturity, but they do not offset the package-specific abandonment warning.

Workflow auditdanger

All 26 workflows were analyzed, but 62 high-confidence findings include template injection; some findings occur in a workflow_run workflow, which can make the issue materially risky. The repository has no untrusted checkouts or script-injection findings, and most workflows use read-only permissions, which partly compensates but does not remove the concern.

Repo package mentioncaution

The linked repository name does not match the package and its README does not mention react-test-renderer, creating uncertainty about package-specific ownership. However, the package README and React organization backing connect it to the larger project, so this is only a caution.