simplebar-react

Build provenancecaution

No build attestation or trusted-publisher provenance is reported, leaving publication origin less transparent.

Maintainerscaution

Only one account has registry publish access, which creates a thin publishing base; this is a maintenance-resilience concern despite the linked project having a visible source owner.

Project backingcaution

The source repository is owned by an individual rather than an organization, so there is no organizational backing signal to offset the thin maintainer base.

Release historycaution

The package has 96 releases since 2018, but none in the last 12 months; the mature history partly offsets the recent release gap.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, a concrete sign of currently quiet maintenance.