It's react's useEffect hook, except using deep comparison on the inputs, not reference equality
58%
Total Score
50
100
81
67
The latest release was published in October 2021, with no releases in the last 12 months; this is a substantial maintenance concern for a dependency.
There were no commits and no active maintainers in the three months measured, indicating currently weak development activity even though the repository is not archived.
The repository uses TypeScript, npm scripts, and Babel, but no security scanning tools were detected; the missing scanning coverage is a modest transparency gap.
No repository security policy was found, leaving vulnerability-reporting guidance undocumented.
The sole workflow analyzed successfully, but all 10 action references are unpinned and the auditor found a high-confidence unsound-contains condition that can be bypassed if an attacker controls github.ref.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
dequal Version ^2.0.2 | — | — |
@babel/runtime Version ^7.12.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.