react-focus-lock 1.5.0

It is a trap! (for a focus)

react-focus-lock@1.5.0 was published on 2017-11-06. Its manifest declares 3 runtime dependencies and 1 peer requirement. Bundled type declarations are not declared in the inspected metadata. No Node.js engine requirement is declared in this manifest.

All react-focus-lock versions · Permanent reference to 1.5.0 · Latest release

Package specifications

Version	1.5.0
License declaration	ISC
Published	2017-11-06T07:49:59.947Z
Node.js requirement	Not declared
Type declarations	Not declared
Runtime dependency count	3
Peer requirement count	1
Optional dependency count	0
Minified size	Measurement not available yet
Minified + gzip	Measurement not available yet
Unpacked distribution size	Not supplied
Published file count	Not supplied
Package type	Not declared
ES module entry	Not declared
Default entry	dist/index.js
Side effects declaration	Not declared
Direct advisories	0
Resolved graph dependencies	20
Repository stars	1392
Repository forks	75

Install react-focus-lock 1.5.0

npm install react-focus-lock@1.5.0
pnpm add react-focus-lock@1.5.0
yarn add react-focus-lock@1.5.0

Runtime dependencies

Peer requirements

react ^15.0.0 || ^16.0.0

Optional dependencies

None declared

Resolved dependency graph

This deps.dev graph describes a generic 64-bit Linux environment, not your application lockfile.

asap@2.0.6 — indirect
core-js@1.2.7 — indirect
encoding@0.1.14 — indirect
fbjs@0.8.18 — indirect
focus-lock@0.1.0 — direct
iconv-lite@0.7.3 — indirect
is-stream@1.1.0 — indirect
isomorphic-fetch@2.2.1 — indirect
js-tokens@4.0.0 — indirect
loose-envify@1.4.0 — indirect
node-fetch@1.7.3 — indirect
object-assign@4.1.1 — indirect
promise@7.3.1 — indirect
prop-types@15.5.10 — direct
react-side-effect@1.2.0 — direct
safer-buffer@2.1.2 — indirect
setimmediate@1.0.5 — indirect
shallowequal@1.1.0 — indirect
ua-parser-js@0.7.41 — indirect
whatwg-fetch@3.6.20 — indirect

How to interpret the specifications

Bundlephobia measurements use its standard package build and may exclude peer dependencies. Unpacked npm distribution size includes shipped files and is a different measurement. Module declarations do not prove tree-shaking or runtime compatibility.

Advisories apply to this package version directly; transitive dependencies need separate inspection. Repository signals describe the whole repository and are current observations, including on historical-version pages.

OpenSSF repository checks

Provider assessment: 2026-08-24T00:00:00Z. These are repository checks, not a jsL maintenance score.

Code-Review	2/10 — Found 5/20 approved changesets -- score normalized to 2
Dangerous-Workflow	10/10 — no dangerous workflow patterns detected
Maintained	0/10 — 0 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Token-Permissions	0/10 — detected GitHub workflow tokens with excessive permissions
Binary-Artifacts	10/10 — no binaries found in the repo
Pinned-Dependencies	0/10 — dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices	0/10 — no effort to earn an OpenSSF best practices badge detected
Security-Policy	0/10 — security policy file not detected
Fuzzing	0/10 — project is not fuzzed
License	10/10 — license file detected
Branch-Protection	0/10 — branch protection not enabled on development/release branches
SAST	0/10 — SAST tool is not run on all commits -- score normalized to 0

Evidence and freshness

https://registry.npmjs.org/react-focus-lock/1.5.0 — retrieved 2026-10-29T16:53:07.129Z
https://api.deps.dev/v3/projects/github.com%2FtheKashey%2Freact-focus-lock — retrieved 2026-10-29T15:29:14.679Z
https://api.deps.dev/v3/systems/npm/packages/react-focus-lock/versions/1.5.0 — retrieved 2026-10-29T16:53:07.643Z
https://api.deps.dev/v3/systems/npm/packages/react-focus-lock/versions/1.5.0:dependencies — retrieved 2026-10-29T16:53:07.668Z