use-isomorphic-layout-effect

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is reported, reducing release transparency even though this does not establish a malicious release.

Lifecycle scriptscaution

A prepare script runs during package lifecycle operations. This is not inherently unsafe, but it adds install-time behavior that should be understood when using the dependency.

Maintainerscaution

Only one registry maintainer account is listed. The linked repository is user-owned rather than organization-owned, so there is limited visible publishing redundancy.

Release historycaution

The package has six releases over about 6 years, but none in the last 12 months; this indicates a slow or paused release cadence for a dependency that may still be stable.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months. Combined with the slow release cadence, this raises maintenance and abandonment risk.