react-inspector/dns
The package is licensed, tested in its repository, and has release notes for this version. Install-time scripts, broad workflow permissions, and unpinned actions add avoidable supply-chain exposure.
58%
Total Score
75
81
50
Health Score Breakdown
The package runs post-install and post-update commands, creating extra execution during dependency operations and increasing review requirements.
Only one release exists, published 391 days ago, with no releases in the last 12 months; this provides little evidence of a sustained release cadence.
There were no commits and no active maintainers in the last three months, leaving current maintenance capacity uncertain even though the repository was recently pushed.
The repository uses Composer and Make, but no security scanning tools were detected, leaving a modest security-process gap.
The repository has no security policy, reducing transparency about how vulnerabilities should be reported and handled.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 react/dns Version ^1.0.0 | — | — |
open-telemetry/api Version ^1.4.0 | — | — |
open-telemetry/sdk Version ^1.6 | — | — |
open-telemetry/context Version ^1.2.1 | — | — |
open-telemetry/sem-conv Version ^1.32.1 | — | — |
Weekly Downloads
Info
- Last Published
- 1 year ago
- Created
- 1 year ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.