Is react-confetti safe to use?

react-confetti has no known vulnerabilities on the latest version (6.4.0). DepScope rates its health at 79/100 (moderate risk).

What is the latest version of react-confetti?

The latest version of react-confetti is 6.4.0, released 2025-03-04.

Does react-confetti have known vulnerabilities?

No known vulnerabilities on the latest version of react-confetti.

Is react-confetti deprecated?

No, react-confetti is actively maintained. Latest release: 6.4.0 (2025-03-04).

What are alternatives to react-confetti?

Popular alternatives to react-confetti in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does react-confetti use?

react-confetti is licensed under MIT.

react-confetti

npmv6.4.0

React component to draw confetti for your party.

License MITpermissive45 versions1 maintainers1 deps2,510,337 weekly dl

alampros/react-confetti

79

/ 100

Health

safe to use

[email protected] is safe to use (health: 79/100)

Health breakdown0 – 100

15/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

7/15

community

0/15

popularity_floor

Vulnerabilities

0

none known

Bundle & TypeScript

📦

Bundle Size

9.5 KBminified

3.2 KB gzipped

1 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

Dependencies (1)

tween-functions

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/react-confetti