Is react-spring safe to use?

react-spring has no known vulnerabilities on the latest version (10.0.3). DepScope rates its health at 70/100 (moderate risk).

What is the latest version of react-spring?

The latest version of react-spring is 10.0.3, released 2025-09-18.

Does react-spring have known vulnerabilities?

No known vulnerabilities on the latest version of react-spring.

Is react-spring deprecated?

No, react-spring is actively maintained. Latest release: 10.0.3 (2025-09-18).

What are alternatives to react-spring?

Popular alternatives to react-spring in npm include: semver, ansi-styles, debug, minimatch, brace-expansion.

What license does react-spring use?

react-spring is licensed under MIT.

react-spring

npmv10.0.3

License MITpermissive385 versions2 maintainers6 deps1,100,683 weekly dl

pmndrs/react-spring

/ 100

Health

safe to use

[email protected] is safe to use (health: 70/100)

Health breakdown0 – 100

10/25

maintenance

17/20

popularity

25/25

security

15/15

maturity

3/15

community

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

49.2 KBminified

18.9 KB gzipped

6 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

Dependencies (6)

@react-spring/core @react-spring/konva @react-spring/native @react-spring/three @react-spring/web @react-spring/zdog

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/react-spring