@socket.io/component-emitter

Release historycaution

The package has had no releases in the last 12 months, and its latest release was over two years ago; the six-release history shows a modest cadence rather than active recent maintenance.

Repo commit activitycaution

The repository recorded zero commits and zero active maintainers in the last three months, which is the clearest sign that maintenance has slowed.

Repo toolingcaution

The repository uses a build tool, but no security scanning tool was detected; this is a modest transparency and hygiene gap rather than a severe concern.

Security policycaution

No repository security policy was found, leaving vulnerability-reporting expectations undocumented.

Workflow auditcaution

The workflow audit completed cleanly and shows read-only permissions, but both analyzed action references are unpinned, leaving avoidable workflow supply-chain drift.