Is use-composed-ref safe to use?

use-composed-ref has no known vulnerabilities on the latest version (1.4.0). DepScope rates its health at 56/100 (high risk).

What is the latest version of use-composed-ref?

The latest version of use-composed-ref is 1.4.0, released 2024-12-13.

Does use-composed-ref have known vulnerabilities?

No known vulnerabilities on the latest version of use-composed-ref.

Is use-composed-ref deprecated?

No, use-composed-ref is actively maintained. Latest release: 1.4.0 (2024-12-13).

What are alternatives to use-composed-ref?

Popular alternatives to use-composed-ref in npm include: ?, semver, minimatch, debug, brace-expansion.

What license does use-composed-ref use?

use-composed-ref is licensed under MIT.

use-composed-ref

npmv1.4.0

React hook which creates a ref function from given refs. Useful when using forwardRef.

License MITpermissive6 versions1 maintainers0 deps5,920,503 weekly dl

Andarist/use-composed-ref

/ 100

Health

use with caution

[email protected] low health (56/100) — consider alternatives

Moderate health score (56/100) — verify manually

Health breakdown0 – 100

0/25

maintenance

17/20

popularity

25/25

security

12/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

none known

Bundle & TypeScript

📦

Bundle Size

0.4 KBminified

0.3 KB gzipped

0 direct dependencies

ESMside effects

🌟

TypeScript

10/10typed

bundled

Health History

Dependency Tree

License Audit

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/npm/use-composed-ref