react-transition-group

Repo commit activitydanger

There were zero commits and zero active maintainers during the measured three-month period. Combined with the old latest release, this materially raises abandonment and maintenance risk.

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported, leaving release origin less transparent than it could be. This is a supply-chain transparency gap, not evidence that the package is malicious.

Release historycaution

The project has 44 releases since December 2016, but it has had no release in the last 12 months and the latest release was August 1, 2022. That long release gap is a meaningful maintenance concern despite the package's mature history.

Repo issue activitycaution

There were no new or closed issues and no new or merged pull requests in the measured month, while 213 issues and 45 pull requests remain open. This indicates limited current project activity and unresolved backlog.

Repo toolingcaution

The repository uses established build tooling including Rollup, Babel, npm scripts, Webpack, and TypeScript, but no security scanning tools were detected. The build setup is healthy while security-process transparency is limited.