Is @depup/hoist-non-react-statics safe to use?

@depup/hoist-non-react-statics has no known vulnerabilities on the latest version (3.3.2-depup.1). DepScope rates its health at 54/100 (high risk).

What is the latest version of @depup/hoist-non-react-statics?

The latest version of @depup/hoist-non-react-statics is 3.3.2-depup.1, released 2026-09-10.

Does @depup/hoist-non-react-statics have known vulnerabilities?

No known vulnerabilities on the latest version of @depup/hoist-non-react-statics.

Is @depup/hoist-non-react-statics deprecated?

No, @depup/hoist-non-react-statics is actively maintained. Latest release: 3.3.2-depup.1 (2026-09-10).

What are alternatives to @depup/hoist-non-react-statics?

Popular alternatives to @depup/hoist-non-react-statics in npm include: ?, semver, debug, ansi-styles, minimatch.

What license does @depup/hoist-non-react-statics use?

@depup/hoist-non-react-statics is licensed under BSD-3-Clause.

@depup/hoist-non-react-statics

npmv3.3.2-depup.1

Copies non-react specific statics from a child component to a parent component (with updated dependencies)

License BSD-3-Clausepermissive2 versions1 maintainers1 deps2 weekly dl

mridgway/hoist-non-react-statics

/ 100

Health

use with caution

@depup/[email protected] low health (54/100) — consider alternatives

Moderate health score (54/100) — verify manually

Health breakdown0 – 100

20/25

maintenance

0/20

popularity

25/25

security

3/15

maturity

6/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

0/10untyped

No type definitions available

Health History

Dependency Tree

License Audit

Dependencies (1)

react-is

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@depup/hoist-non-react-statics