react-toastify

Name lookalikedanger

The indicator reports that the package borrows the identity of the much more downloaded react-is package, with borrows_lookalike_identity true. Even though artifact overlap is zero and the repository matches react-toastify, this naming signal is a serious supply-chain concern because consumers may have intended to install react-is.

Repo commit activitydanger

There were zero commits and zero active maintainers in the last three months, a meaningful abandonment-risk signal despite the recent release and repository push.

Project backingcaution

The repository is owned by an individual rather than an organization, so the one-account registry maintainer base is not supported by organizational backing and leaves limited visible redundancy.

Release historycaution

The project is mature, with releases spanning nearly 10 years and 170 total releases, but only one release was published in the last 12 months, indicating a sharply slower recent cadence.

Repo issue activitycaution

The repository has 74 open issues and 29 open pull requests, but no issues were closed in the last month and no pull requests were merged, suggesting limited recent responsiveness.