Gathering detailed insights and metrics for react-refresh
NPM registry records approximately 1.5 to 2 billion package downloads per day.
Installations
npm install react-refreshScore
98.8
Supply Chain
69.8
Quality
99.6
Maintenance
100
Vulnerability
100
License
Releases
102
eslint-plugin-react-hooks@5.0.0 (Oct 11, 2024)
eslint-plugin-react-hooks@5.0.0
Published on 11 Oct 2024
18.3.1 (April 26, 2024)
v18.3.1
Published on 26 Apr 2024
18.3.0 (April 25, 2024)
v18.3.0
Published on 26 Apr 2024
18.2.0 (June 14, 2022)
v18.2.0
Published on 14 Jun 2022
18.1.0 (April 26, 2022)
v18.1.0
Published on 26 Apr 2022
18.0.0 (March 29, 2022)
v18.0.0
Published on 29 Mar 2022
Contributors
1,717
Developer
Module System
BETA
CommonJS, ESM
Statistics
229,467 Stars
19,697 Commits
46,988 Forks
6,619 Watching
335 Branches
1,717 Contributors
Updated on 21 Nov 2024
Languages
JavaScript (64.03%)
TypeScript (21.86%)
Rust (10.81%)
HTML (1.48%)
CSS (0.88%)
C++ (0.59%)
CoffeeScript (0.23%)
C (0.07%)
Shell (0.06%)
Total Downloads
Cumulative downloads
Total Downloads
1,949,370,784
Last day
1%
2,864,949
Compared to previous day
Last week
1.8%
14,781,254
Compared to previous week
Last month
7.5%
63,151,289
Compared to previous month
Last year
17.1%
677,172,047
Compared to previous year
Daily Downloads
Weekly Downloads
Monthly Downloads
Yearly Downloads
Dev Dependencies
3
Versions
React · 
React is a JavaScript library for building user interfaces.
- Declarative: React makes it painless to create interactive UIs. Design simple views for each state in your application, and React will efficiently update and render just the right components when your data changes. Declarative views make your code more predictable, simpler to understand, and easier to debug.
- Component-Based: Build encapsulated components that manage their own state, then compose them to make complex UIs. Since component logic is written in JavaScript instead of templates, you can easily pass rich data through your app and keep the state out of the DOM.
- Learn Once, Write Anywhere: We don't make assumptions about the rest of your technology stack, so you can develop new features in React without rewriting existing code. React can also render on the server using Node and power mobile apps using React Native.
Learn how to use React in your project.
Installation
React has been designed for gradual adoption from the start, and you can use as little or as much React as you need:
- Use Quick Start to get a taste of React.
- Add React to an Existing Project to use as little or as much React as you need.
- Create a New React App if you're looking for a powerful JavaScript toolchain.
Documentation
You can find the React documentation on the website.
Check out the Getting Started page for a quick overview.
The documentation is divided into several sections:
- Quick Start
- Tutorial
- Thinking in React
- Installation
- Describing the UI
- Adding Interactivity
- Managing State
- Advanced Guides
- API Reference
- Where to Get Support
- Contributing Guide
You can improve it by sending pull requests to this repository.
Examples
We have several examples on the website. Here is the first one to get you started:
1import { createRoot } from 'react-dom/client'; 2 3function HelloMessage({ name }) { 4 return <div>Hello {name}</div>; 5} 6 7const root = createRoot(document.getElementById('container')); 8root.render(<HelloMessage name="Taylor" />);
This example will render "Hello Taylor" into a container on the page.
You'll notice that we used an HTML-like syntax; we call it JSX. JSX is not required to use React, but it makes code more readable, and writing it feels like writing HTML.
Contributing
The main purpose of this repository is to continue evolving React core, making it faster and easier to use. Development of React happens in the open on GitHub, and we are grateful to the community for contributing bugfixes and improvements. Read below to learn how you can take part in improving React.
Code of Conduct
Facebook has adopted a Code of Conduct that we expect project participants to adhere to. Please read the full text so that you can understand what actions will and will not be tolerated.
Contributing Guide
Read our contributing guide to learn about our development process, how to propose bugfixes and improvements, and how to build and test your changes to React.
Good First Issues
To help you get your feet wet and get you familiar with our contribution process, we have a list of good first issues that contain bugs that have a relatively limited scope. This is a great place to get started.
License
React is MIT licensed.
No vulnerabilities found.
Reason
30 commit(s) and 11 issue activity found in the last 90 days -- score normalized to 10
Reason
security policy file detected
Details
- Info: security policy file detected: SECURITY.md:1
- Info: Found linked content: SECURITY.md:1
- Info: Found disclosure, vulnerability, and/or timelines in security policy: SECURITY.md:1
- Info: Found text in security policy: SECURITY.md:1
Reason
no dangerous workflow patterns detected
Reason
license file detected
Details
- Info: project has a license file: LICENSE:0
- Info: FSF or OSI recognized license: MIT License: LICENSE:0
Reason
binaries present in source code
Details
- Warn: binary detected: compiler/apps/playground/public/graphvizlib.wasm:1
Reason
Found 25/30 approved changesets -- score normalized to 8
Reason
badge detected: InProgress
Reason
detected GitHub workflow tokens with excessive permissions
Details
- Warn: no topLevel permission defined: .github/workflows/compiler_playground.yml:1
- Warn: no topLevel permission defined: .github/workflows/compiler_prereleases.yml:1
- Warn: no topLevel permission defined: .github/workflows/compiler_prereleases_manual.yml:1
- Warn: no topLevel permission defined: .github/workflows/compiler_prereleases_nightly.yml:1
- Warn: no topLevel permission defined: .github/workflows/compiler_prereleases_weekly.yml:1
- Warn: no topLevel permission defined: .github/workflows/compiler_rust.yml:1
- Warn: no topLevel permission defined: .github/workflows/compiler_typescript.yml:1
- Warn: no topLevel permission defined: .github/workflows/devtools_regression_tests.yml:1
- Warn: no topLevel permission defined: .github/workflows/runtime_build_and_test.yml:1
- Warn: no topLevel permission defined: .github/workflows/runtime_commit_artifacts.yml:1
- Warn: no topLevel permission defined: .github/workflows/runtime_fuzz_tests.yml:1
- Warn: no topLevel permission defined: .github/workflows/runtime_prereleases.yml:1
- Warn: no topLevel permission defined: .github/workflows/runtime_prereleases_manual.yml:1
- Warn: no topLevel permission defined: .github/workflows/runtime_prereleases_nightly.yml:1
- Warn: no topLevel permission defined: .github/workflows/shared_lint.yml:1
- Warn: no topLevel permission defined: .github/workflows/shared_stale.yml:1
- Info: no jobLevel write permissions found
Reason
dependency not pinned by hash detected -- score normalized to 0
Details
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_playground.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_playground.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_playground.yml:30: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_playground.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_playground.yml:36: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_playground.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_playground.yml:52: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_playground.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_prereleases.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_prereleases.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_prereleases.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_prereleases.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_prereleases.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_prereleases.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_rust.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_rust.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/compiler_rust.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_rust.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_rust.yml:55: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_rust.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/compiler_rust.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_rust.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/compiler_rust.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_rust.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_rust.yml:74: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_rust.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/compiler_rust.yml:75: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_rust.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_typescript.yml:31: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_typescript.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_typescript.yml:40: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_typescript.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_typescript.yml:41: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_typescript.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_typescript.yml:47: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_typescript.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_typescript.yml:59: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_typescript.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_typescript.yml:60: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_typescript.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_typescript.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_typescript.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_typescript.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_typescript.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_typescript.yml:84: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_typescript.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/compiler_typescript.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/compiler_typescript.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:113: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:114: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:120: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:127: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:147: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:154: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:161: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:175: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:46: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:56: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:57: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:72: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:88: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/devtools_regression_tests.yml:93: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/devtools_regression_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:90: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:91: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:97: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:319: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:320: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:326: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:335: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:352: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:353: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:359: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:368: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:421: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:422: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:431: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:440: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:466: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:471: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:482: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:483: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:489: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:498: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:509: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:515: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:520: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:27: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:28: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:244: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:245: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:251: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:260: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:530: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:531: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:537: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:546: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:564: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:565: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:571: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:595: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:605: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:606: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:612: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:621: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:633: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:642: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:44: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:45: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:66: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:382: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:383: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:389: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:400: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:141: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:142: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:148: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:168: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:174: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:197: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:274: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:275: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:281: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:290: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_build_and_test.yml:307: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_build_and_test.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:38: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:51: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:61: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:67: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:73: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:165: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:169: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:179: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:184: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:247: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:263: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:268: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:318: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: third-party GitHubAction not pinned by hash: .github/workflows/runtime_commit_artifacts.yml:414: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_commit_artifacts.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_fuzz_tests.yml:18: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_fuzz_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_fuzz_tests.yml:19: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_fuzz_tests.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_prereleases.yml:32: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_prereleases.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_prereleases.yml:33: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_prereleases.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/runtime_prereleases.yml:39: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/runtime_prereleases.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:42: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:43: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:49: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:62: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:63: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:69: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:82: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:83: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:89: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:22: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:23: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_lint.yml:29: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_lint.yml/main?enable=pin
- Warn: GitHub-owned GitHubAction not pinned by hash: .github/workflows/shared_stale.yml:16: update your workflow using https://app.stepsecurity.io/secureworkflow/facebook/react/shared_stale.yml/main?enable=pin
- Info: 0 out of 137 GitHub-owned GitHubAction dependencies pinned
- Info: 0 out of 6 third-party GitHubAction dependencies pinned
Reason
SAST tool is not run on all commits -- score normalized to 0
Details
- Warn: 0 commits out of 30 are checked with a SAST tool
Reason
project is not fuzzed
Details
- Warn: no fuzzer integrations found
Reason
194 existing vulnerabilities detected
Details
- Warn: Project is vulnerable to: RUSTSEC-2024-0320
- Warn: Project is vulnerable to: GHSA-3xgq-45jj-v275
- Warn: Project is vulnerable to: GHSA-67hx-6x53-jw92
- Warn: Project is vulnerable to: GHSA-c2qf-rxjj-qqgw
- Warn: Project is vulnerable to: GHSA-v88g-cgmw-v5xw
- Warn: Project is vulnerable to: GHSA-832h-xg76-4gv6
- Warn: Project is vulnerable to: GHSA-cwfw-4gq5-mrqx
- Warn: Project is vulnerable to: GHSA-g95f-p29q-9xw4
- Warn: Project is vulnerable to: GHSA-grv7-fg5c-xmjg
- Warn: Project is vulnerable to: GHSA-w8qv-6jwh-64r5
- Warn: Project is vulnerable to: GHSA-9vvw-cc9w-f27h
- Warn: Project is vulnerable to: GHSA-gxpj-cx7g-858c
- Warn: Project is vulnerable to: GHSA-hr2v-3952-633q
- Warn: Project is vulnerable to: GHSA-qrmc-fj45-qfc2
- Warn: Project is vulnerable to: GHSA-8r6j-v8pm-fqw3
- Warn: Project is vulnerable to: MAL-2023-462
- Warn: Project is vulnerable to: GHSA-xf7w-r453-m56c
- Warn: Project is vulnerable to: GHSA-44pw-h2cw-w3vq
- Warn: Project is vulnerable to: GHSA-jp4x-w63m-7wgm
- Warn: Project is vulnerable to: GHSA-c429-5p7v-vgjp
- Warn: Project is vulnerable to: GHSA-qqgx-2p2h-9c37
- Warn: Project is vulnerable to: GHSA-896r-f27r-55mw
- Warn: Project is vulnerable to: GHSA-9c47-m6qq-7p4h
- Warn: Project is vulnerable to: GHSA-76p3-8jx3-jpfq
- Warn: Project is vulnerable to: GHSA-3rfm-jhwj-7488
- Warn: Project is vulnerable to: GHSA-hhq3-ff78-jv3g
- Warn: Project is vulnerable to: GHSA-952p-6rrq-rcjv
- Warn: Project is vulnerable to: GHSA-f8q6-p94x-37v3
- Warn: Project is vulnerable to: GHSA-vh95-rmgr-6w4m / GHSA-xvch-5gv4-984h
- Warn: Project is vulnerable to: GHSA-w9mr-4mfr-499f
- Warn: Project is vulnerable to: GHSA-hj48-42vr-x3v9
- Warn: Project is vulnerable to: GHSA-hrpp-h998-j3pp
- Warn: Project is vulnerable to: GHSA-6g33-f262-xjp4
- Warn: Project is vulnerable to: GHSA-p8p7-x288-28g6
- Warn: Project is vulnerable to: GHSA-2m39-62fm-q8r3
- Warn: Project is vulnerable to: GHSA-mf6x-7mm4-x2g7
- Warn: Project is vulnerable to: GHSA-j44m-qm6p-hp7m
- Warn: Project is vulnerable to: GHSA-3jfq-g458-7qm9
- Warn: Project is vulnerable to: GHSA-5955-9wpr-37jh
- Warn: Project is vulnerable to: GHSA-f5x3-32g6-xq36
- Warn: Project is vulnerable to: GHSA-g7q5-pjjr-gqvp
- Warn: Project is vulnerable to: GHSA-72xf-g2v4-qvf3
- Warn: Project is vulnerable to: GHSA-whgm-jr23-g3j9
- Warn: Project is vulnerable to: GHSA-93q8-gq69-wqmw
- Warn: Project is vulnerable to: GHSA-fwr7-v2mv-hh25
- Warn: Project is vulnerable to: GHSA-wxhq-pm8v-cw75
- Warn: Project is vulnerable to: GHSA-257v-vj4p-3w2h
- Warn: Project is vulnerable to: GHSA-pxg6-pf52-xh8x
- Warn: Project is vulnerable to: GHSA-h6ch-v84p-w6p9
- Warn: Project is vulnerable to: GHSA-3wcq-x3mq-6r9p
- Warn: Project is vulnerable to: GHSA-ff7x-qrg7-qggm
- Warn: Project is vulnerable to: GHSA-vh7m-p724-62c2
- Warn: Project is vulnerable to: GHSA-r9p9-mrjm-926w
- Warn: Project is vulnerable to: GHSA-434g-2637-qmqr
- Warn: Project is vulnerable to: GHSA-49q7-c7j4-3p7m
- Warn: Project is vulnerable to: GHSA-977x-g7h5-7qgw
- Warn: Project is vulnerable to: GHSA-f7q4-pwc6-w24p
- Warn: Project is vulnerable to: GHSA-fc9h-whq2-v747
- Warn: Project is vulnerable to: GHSA-4gmj-3p3h-gm8h
- Warn: Project is vulnerable to: GHSA-6h5x-7c5m-7cr7
- Warn: Project is vulnerable to: GHSA-rv95-896h-c2vc
- Warn: Project is vulnerable to: GHSA-qw6h-vgh9-j6wx
- Warn: Project is vulnerable to: GHSA-mpcf-4gmh-23w8
- Warn: Project is vulnerable to: GHSA-9qj9-36jm-prpv
- Warn: Project is vulnerable to: GHSA-pfrx-2q88-qq97
- Warn: Project is vulnerable to: GHSA-765h-qjxv-5f44
- Warn: Project is vulnerable to: GHSA-f2jv-r9rf-7988
- Warn: Project is vulnerable to: GHSA-43f8-2h32-f4cj
- Warn: Project is vulnerable to: GHSA-pfq8-rq6v-vf5m
- Warn: Project is vulnerable to: GHSA-6x33-pw7p-hmpq
- Warn: Project is vulnerable to: GHSA-c7qv-q95q-8v27
- Warn: Project is vulnerable to: GHSA-78xj-cgh5-2h22
- Warn: Project is vulnerable to: GHSA-2p57-rm9w-gvfp
- Warn: Project is vulnerable to: GHSA-7r28-3m3f-r2pr
- Warn: Project is vulnerable to: GHSA-r8j5-h5cx-65gg
- Warn: Project is vulnerable to: GHSA-2pr6-76vf-7546
- Warn: Project is vulnerable to: GHSA-8j8c-7jfh-h6hx
- Warn: Project is vulnerable to: GHSA-35jh-r3h4-6jhm
- Warn: Project is vulnerable to: GHSA-pp57-mqmh-44h7
- Warn: Project is vulnerable to: GHSA-4xcv-9jjx-gfj3
- Warn: Project is vulnerable to: GHSA-f9cm-qmx5-m98h
- Warn: Project is vulnerable to: GHSA-7wpw-2hjm-89gp
- Warn: Project is vulnerable to: GHSA-wrvr-8mpx-r7pp
- Warn: Project is vulnerable to: GHSA-ff6r-5jwm-8292
- Warn: Project is vulnerable to: GHSA-r683-j2x4-v87g
- Warn: Project is vulnerable to: GHSA-92xj-mqp7-vmcj
- Warn: Project is vulnerable to: GHSA-wxgw-qj99-44c2
- Warn: Project is vulnerable to: GHSA-5rrq-pxf6-6jx5
- Warn: Project is vulnerable to: GHSA-8fr3-hfg3-gpgp
- Warn: Project is vulnerable to: GHSA-gf8q-jrpm-jvxq
- Warn: Project is vulnerable to: GHSA-2r2c-g63r-vccr
- Warn: Project is vulnerable to: GHSA-cfm4-qjh2-4765
- Warn: Project is vulnerable to: GHSA-x4jg-mjrx-434g
- Warn: Project is vulnerable to: GHSA-5fw9-fq32-wv5p
- Warn: Project is vulnerable to: GHSA-rp65-9cf3-cjxr
- Warn: Project is vulnerable to: GHSA-6394-6h9h-cfjg
- Warn: Project is vulnerable to: GHSA-9wv6-86v2-598j
- Warn: Project is vulnerable to: GHSA-566m-qj78-rww5
- Warn: Project is vulnerable to: GHSA-7fh5-64p2-3v2j
- Warn: Project is vulnerable to: GHSA-hxcm-v35h-mg2x
- Warn: Project is vulnerable to: GHSA-29gp-92wp-94q8
- Warn: Project is vulnerable to: GHSA-5q6m-3h65-w53x
- Warn: Project is vulnerable to: GHSA-m6fv-jmcg-4jfg
- Warn: Project is vulnerable to: GHSA-cm22-4g7w-348p
- Warn: Project is vulnerable to: GHSA-g4rg-993r-mgx7
- Warn: Project is vulnerable to: GHSA-c9g6-9335-x697
- Warn: Project is vulnerable to: GHSA-jgrx-mgxx-jf9v
- Warn: Project is vulnerable to: GHSA-7p7h-4mm5-852v
- Warn: Project is vulnerable to: GHSA-662x-fhqg-9p8v
- Warn: Project is vulnerable to: GHSA-394c-5j6w-4xmx
- Warn: Project is vulnerable to: GHSA-78cj-fxph-m83p
- Warn: Project is vulnerable to: GHSA-fhg7-m89q-25r3
- Warn: Project is vulnerable to: GHSA-3329-pjwv-fjpg
- Warn: Project is vulnerable to: GHSA-p6j9-7xhc-rhwp
- Warn: Project is vulnerable to: GHSA-89gv-h8wf-cg8r
- Warn: Project is vulnerable to: GHSA-gcv8-gh4r-25x6
- Warn: Project is vulnerable to: GHSA-gmv4-r438-p67f
- Warn: Project is vulnerable to: GHSA-8h2f-7jc4-7m3m
- Warn: Project is vulnerable to: GHSA-3vjf-82ff-p4r3
- Warn: Project is vulnerable to: GHSA-g694-m8vq-gv9h
- Warn: Project is vulnerable to: GHSA-pv4c-p2j5-38j4
- Warn: Project is vulnerable to: GHSA-46c4-8wrp-j99v
- Warn: Project is vulnerable to: GHSA-9m6j-fcg5-2442
- Warn: Project is vulnerable to: GHSA-hh27-ffr2-f2jc
- Warn: Project is vulnerable to: GHSA-rqff-837h-mm52
- Warn: Project is vulnerable to: GHSA-8v38-pw62-9cw2
- Warn: Project is vulnerable to: GHSA-hgjh-723h-mx2j
- Warn: Project is vulnerable to: GHSA-jf5r-8hm2-f872
- Warn: Project is vulnerable to: GHSA-wr3j-pwj9-hqq6
- Warn: Project is vulnerable to: GHSA-cf66-xwfp-gvc4
- Warn: Project is vulnerable to: GHSA-g78m-2chm-r7qv
- Warn: Project is vulnerable to: GHSA-c4w7-xm78-47vh
- Warn: Project is vulnerable to: GHSA-p9pc-299p-vxgp
- Warn: Project is vulnerable to: GHSA-qwcr-r2fm-qrc7
- Warn: Project is vulnerable to: GHSA-36jr-mh4h-2g58
- Warn: Project is vulnerable to: GHSA-w5p7-h5w8-2hfq
- Warn: Project is vulnerable to: GHSA-j8xg-fqg3-53r7
- Warn: Project is vulnerable to: GHSA-ww39-953v-wcq6
- Warn: Project is vulnerable to: GHSA-6chw-6frg-f759
- Warn: Project is vulnerable to: GHSA-282f-qqgm-c34q
- Warn: Project is vulnerable to: GHSA-jf85-cpcp-j695
- Warn: Project is vulnerable to: GHSA-p6mc-m468-83gw
- Warn: Project is vulnerable to: GHSA-29mw-wpgm-hmr9
- Warn: Project is vulnerable to: GHSA-rq8g-5pc5-wrhr
- Warn: Project is vulnerable to: GHSA-mvjj-gqq2-p4hw
- Warn: Project is vulnerable to: GHSA-4hpf-3wq7-5rpr
- Warn: Project is vulnerable to: GHSA-f522-ffg8-j8r6
- Warn: Project is vulnerable to: GHSA-fvqr-27wr-82fm
- Warn: Project is vulnerable to: GHSA-4xc9-xhrj-v574
- Warn: Project is vulnerable to: GHSA-x5rq-j2xg-h7qm
- Warn: Project is vulnerable to: GHSA-7px7-7xjx-hxm8
- Warn: Project is vulnerable to: GHSA-x5pg-88wf-qq4p
- Warn: Project is vulnerable to: GHSA-5v2h-r2cx-5xgj
- Warn: Project is vulnerable to: GHSA-rrrm-qjm4-v8hf
- Warn: Project is vulnerable to: GHSA-28xh-wpgr-7fm8
- Warn: Project is vulnerable to: GHSA-gqgv-6jq5-jjj9
- Warn: Project is vulnerable to: GHSA-4rq4-32rv-6wp6
- Warn: Project is vulnerable to: GHSA-64g7-mvw6-v9qj
- Warn: Project is vulnerable to: GHSA-xc7v-wxcw-j472
- Warn: Project is vulnerable to: GHSA-rc47-6667-2j5j
- Warn: Project is vulnerable to: GHSA-wqq4-5wpv-mx2g
- Warn: Project is vulnerable to: GHSA-3787-6prv-h9w3
- Warn: Project is vulnerable to: GHSA-9qxr-qj54-h672
- Warn: Project is vulnerable to: GHSA-m4v8-wqvr-p9f7
- Warn: Project is vulnerable to: GHSA-6c8f-qphg-qjgp
- Warn: Project is vulnerable to: GHSA-4vvj-4cpr-p986
- Warn: Project is vulnerable to: GHSA-hc9w-4p87-j549
- Warn: Project is vulnerable to: GHSA-wg6g-ppvx-927h
- Warn: Project is vulnerable to: GHSA-qh2h-chj9-jffq
- Warn: Project is vulnerable to: GHSA-pc58-wgmc-hfjr
- Warn: Project is vulnerable to: GHSA-vvv8-xw5f-3f88
- Warn: Project is vulnerable to: GHSA-x3m3-4wpv-5vgc
- Warn: Project is vulnerable to: GHSA-gcx4-mw62-g8wm
- Warn: Project is vulnerable to: GHSA-w573-4hg7-7wgq
- Warn: Project is vulnerable to: GHSA-px4h-xg32-q955
- Warn: Project is vulnerable to: GHSA-4wf5-vphf-c2xc
- Warn: Project is vulnerable to: GHSA-gp2j-mg4w-2rh5
- Warn: Project is vulnerable to: GHSA-jc84-3g44-wf2q
- Warn: Project is vulnerable to: GHSA-w7q9-p3jq-fmhm
- Warn: Project is vulnerable to: GHSA-xvf7-4v9q-58w6
- Warn: Project is vulnerable to: GHSA-3h5v-q93c-6h6q
- Warn: Project is vulnerable to: GHSA-c2gp-86p4-5935
- Warn: Project is vulnerable to: GHSA-pp7h-53gx-mx7r
- Warn: Project is vulnerable to: GHSA-p7v2-p9m8-qqg7
- Warn: Project is vulnerable to: GHSA-7x97-j373-85x5
- Warn: Project is vulnerable to: GHSA-7m48-wc93-9g85
- Warn: Project is vulnerable to: GHSA-x3cc-x39p-42qx
- Warn: Project is vulnerable to: GHSA-mhxj-85r3-2x55
- Warn: Project is vulnerable to: GHSA-hwj9-h5mp-3pm3
- Warn: Project is vulnerable to: GHSA-44c6-4v22-4mhx
- Warn: Project is vulnerable to: GHSA-4x5v-gmq8-25ch
- Warn: Project is vulnerable to: GHSA-x2mc-8fgj-3wmr
- Warn: Project is vulnerable to: GHSA-29xr-v42j-r956
- Warn: Project is vulnerable to: GHSA-776f-qx25-q3cc
Score
5.3
/10
Last Scanned on 2024-11-18
The Open Source Security Foundation is a cross-industry collaboration to improve the security of open source software (OSS). The Scorecard provides security health metrics for open source projects.
Learn MoreOther packages similar to react-refresh
eslint-plugin-react-refresh
0.4.14
Validate that your components can safely be updated with fast refresh
@vitejs/plugin-react-swc
3.7.1
Speed up your Vite dev server with SWC
@pmmmwh/react-refresh-webpack-plugin
0.5.15
An **EXPERIMENTAL** Webpack plugin to enable "Fast Refresh" (also previously known as _Hot Reloading_) for React components.
@rspack/plugin-react-refresh
1.0.0
React refresh plugin for rspack