Version 10.7.7 • License MIT
One-Line Verdict
"Stable for production use."
Healthy
Actively Maintained
0 CVE History
No known CVEs.
1.7 MB
Heavy: 1.7 MB
2,164,407
Highly Trusted
Package Payload
21 Direct
Dependency Hell Risk: High chain complexity.
Cold-Start Impact
+25 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Verified Stable
"No known vulnerabilities detected. Version 10.7.7 is stable."
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is @react-three/drei too heavy? Compare it with these industry standards:
"useful add-ons for react-three-fiber"
@react-three/drei is used to facilitate high-performance Node.js workflows. It provides a robust footprint of 1.7 MB on disk.
# Install via NPM
npm install @react-three/drei
# Install via Yarn
yarn add @react-three/drei
You are currently viewing a proprietary security audit for @react-three/drei on PAudit. We aggregate global databases to provide a safety rating of 90/100.
Run npm install @react-three/drei. This installs version 10.7.7 and adds 21 direct dependencies to your project.
Yes, @react-three/drei records 2,164,407 weekly downloads, making it a Highly Trusted part of the ecosystem.