Version 19.2.4 • License MIT
One-Line Verdict
"Heavy install size detected. Review bloat risk."
Poor
Actively Maintained
1 CVE History
Historical vulnerabilities found.
7.0 MB
Critical Bloat: 7.0 MB
0
Niche adoption.
Package Payload
1 Direct
Clean dependency structure.
Cold-Start Impact
+105 ms
Estimated execution overhead on standard hardware.
Current Threat Level
Risk Detected
Our audit detected 1 active or historical security flags. Critical CVEs have been mapped to this library.
Accuracy Protocol
Scanned against OSV.dev (Google Open Source) databases. Last Deep-Scan: 2026.
Is react-dom too heavy? Compare it with these industry standards:
"React package for working with the DOM."
react-dom is used to facilitate high-performance Node.js workflows. It provides a robust footprint of 7.0 MB on disk.
# Install via NPM
npm install react-dom
# Install via Yarn
yarn add react-dom
You are currently viewing a proprietary security audit for react-dom on PAudit. We aggregate global databases to provide a safety rating of 35/100.
Run npm install react-dom. This installs version 19.2.4 and adds 1 direct dependencies to your project.
Yes, react-dom records 0 weekly downloads, making it a Niche adoption. part of the ecosystem.