A cross platform Promise.allSettled polyfill
30%
Total Score
unhealthy
Risky: the package resembles the much larger `promise` package and has had no release or commit activity for over six years.
The package is associated with the far more established `promise` package, which has about 122 million monthly downloads versus about 4.9 million here. Although artifact overlap is zero, the README identifies the lookalike, making it possible that consumers may choose this package unintentionally.
The package has five releases but none in the last 12 months; its latest release was over six years ago. That may be acceptable for a stable polyfill, but it materially reduces evidence of current maintenance.
The repository had zero commits and zero active maintainers in the last three months, consistent with the release gap. The repository is not archived, but there is no recent activity demonstrating ongoing maintenance.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.