Is react-spring safe to use?

react-spring has no known vulnerabilities on the latest version (10.0.4). DepScope rates its health at 80/100 (low risk).

What is the latest version of react-spring?

The latest version of react-spring is 10.0.4, released 2026-05-22.

Does react-spring have known vulnerabilities?

No known vulnerabilities on the latest version of react-spring.

Is react-spring deprecated?

No, react-spring is actively maintained. Latest release: 10.0.4 (2026-05-22).

What are alternatives to react-spring?

Popular alternatives to react-spring in npm include: ?, semver, debug, minimatch.

What license does react-spring use?

react-spring is licensed under MIT.

react-spring

npmv10.0.4

License MITpermissive386 versions2 maintainers6 deps502,441 weekly dl

pmndrs/react-spring

/ 100

Health

safe to use

[email protected] is safe to use (health: 80/100)

Health breakdown0 – 100

15/25

maintenance

14/20

popularity

25/25

security

15/15

maturity

11/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

50.8 KBminified

19.5 KB gzipped

6 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (6)

@react-spring/core @react-spring/konva @react-spring/native @react-spring/three @react-spring/web @react-spring/zdog

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/react-spring