react-virtualized

Name lookalikedanger

The package is flagged as borrowing the identity of the far more established `react-is`, and the signal explicitly reports `borrows_lookalike_identity: true`. Although artifact overlap is zero, this remains a severe adoption risk because consumers may have intended the lookalike package.

Repo commit activitydanger

The repository had zero commits and zero active maintainers in the last three months, reinforcing the evidence of stalled maintenance.

Release historycaution

The package is mature with 297 releases, but it has had no releases in the last 12 months; its latest release was in January 2025. This indicates a meaningful maintenance slowdown despite the long history.

Security policycaution

The linked repository has no security policy, leaving vulnerability reporting and response expectations undocumented.

Type declarationscaution

No type declarations are included for this React library, which makes integration less ergonomic and increases the burden on typed consumers.