Is @lit/react safe to use?

@lit/react has no known vulnerabilities on the latest version (1.0.8). DepScope rates its health at 63/100 (moderate risk).

What is the latest version of @lit/react?

The latest version of @lit/react is 1.0.8, released 2025-07-11.

Does @lit/react have known vulnerabilities?

No known vulnerabilities on the latest version of @lit/react.

Is @lit/react deprecated?

No, @lit/react is actively maintained. Latest release: 1.0.8 (2025-07-11).

What are alternatives to @lit/react?

Popular alternatives to @lit/react in npm include: minimatch, commander, eslint-visitor-keys, ajv, color-name.

What license does @lit/react use?

@lit/react is licensed under BSD-3-Clause.

@lit/react

npmv1.0.8

A React component wrapper for web components.

License BSD-3-Clausepermissive10 versions8 maintainers0 deps1,739,113 weekly dl

lit/lit

/ 100

Health

safe to use

@lit/[email protected] is safe to use (health: 63/100)

Health breakdown0 – 100

10/25

maintenance

17/20

popularity

25/25

security

6/15

maturity

5/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

1.3 KBminified

0.7 KB gzipped

0 direct dependencies

ESMside effectsscoped

🌟

TypeScript

10/10typed

bundled

Quality signals

Publish security

npm signed

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/@lit/react