use-resize-observer

Lifecycle scriptscaution

The package uses prepack and prepare scripts, which add build-time execution during packaging or installation. No provided signal shows these scripts are unsafe, so this is a limited supply-chain caution rather than a severe risk.

Project backingcaution

The repository is owned by a user account rather than an organization. This does not make the package unhealthy, but it means there is no provided organizational backing to offset the relatively small maintainer base.

Repo bus factorcaution

Two contributors were active in the last 3 months, with commits split evenly between the named maintainer and the release bot. Human contributor breadth is therefore limited, but the repository is not wholly dependent on one recent human contributor.

Repo commit activitycaution

Only 2 commits were made in the last 3 months, so recent development activity is modest. However, the period includes a substantial v10 release and two active contributors, making this a minor maintenance caveat rather than abandonment evidence.

Repo toolingcaution

The repository uses TypeScript, Vitest, npm scripts, and a build tool, but no security-scanning tools were detected. The build and test tooling is healthy; the missing security scanning is a modest transparency gap.