Is react-signature-canvas safe to use?

react-signature-canvas has no known vulnerabilities on the latest version (1.1.0-alpha.2). DepScope rates its health at 58/100 (high risk).

What is the latest version of react-signature-canvas?

The latest version of react-signature-canvas is 1.1.0-alpha.2, released 2025-03-29.

Does react-signature-canvas have known vulnerabilities?

No known vulnerabilities on the latest version of react-signature-canvas.

Is react-signature-canvas deprecated?

No, react-signature-canvas is actively maintained. Latest release: 1.1.0-alpha.2 (2025-03-29).

What are alternatives to react-signature-canvas?

Popular alternatives to react-signature-canvas in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does react-signature-canvas use?

react-signature-canvas is licensed under Apache-2.0.

react-signature-canvas

npmv1.1.0-alpha.2

A React wrapper component around signature_pad. 100% test coverage, types, examples, & more. Unopinionated and heavily updated fork of react-signature-pad

License Apache-2.0permissive31 versions1 maintainers4 deps949,714 weekly dl

agilgur5/react-signature-canvas

/ 100

Health

use with caution

[email protected] low health (58/100) — consider alternatives

Moderate health score (58/100) — verify manually

Health breakdown0 – 100

5/25

maintenance

14/20

popularity

25/25

security

12/15

maturity

2/15

community

Vulnerabilities

none known

Bundle & TypeScript

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (4)

@babel/runtime @types/signature_pad signature_pad trim-canvas

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/react-signature-canvas