react-list-drag-and-drop - Package Alerts

(Experimental) A package's licensing information has fine-grained problems.

Found 2 instances in 1 package

This package is not very popular.

Found 1 instance in 1 package

(Experimental) A package's licensing information has fine-grained problems.

Found 2 instances in 2 packages

The maintainer of the package marked it as deprecated. This could indicate that a single version should not be used, or that the package is no longer maintained and any new vulnerabilities will not be fixed.

Found 23 instances in 23 packages

Package uses dynamic code execution (e.g., eval()), which is a dangerous practice. This can prevent the code from running in certain environments and increases the risk that the code may contain exploits or malicious behavior.

Found 19 instances in 19 packages

Install scripts are run when the package is installed. The majority of malware in npm is hidden in install scripts.

Found 3 instances in 3 packages

Packages less than 10 lines of code are easily copied into your own project and may not warrant the additional supply chain risk of an external dependency.

Found 54 instances in 54 packages

This module accesses the network.

Found 19 instances in 19 packages

This module accesses the system shell. Accessing the system shell increases the risk of executing arbitrary code.

Found 20 instances in 20 packages

Contains a medium severity Common Vulnerability and Exposure (CVE).

Found 11 instances in 9 packages

Contains native code (e.g., compiled binaries or shared libraries). Including native code can obscure malicious behavior.

Found 1 instance in 1 package

There are packages with similar names that are downloaded much more often.

The package was published by an npm account that no longer exists.

Found 1 instance in 1 package

Package has a dependency with a floating version range. This can cause issues if the dependency publishes a new major version.

Found 1 instance in 1 package