Polyfill for the proposed React context API
58%
Total Score
50
89
67
A prepublish lifecycle script is present. This is not inherently unsafe, but it adds release-process complexity without provided evidence explaining what the script does.
The repository is owned by an individual account rather than an organization, so there is no provided organizational backing to offset the thin maintainer base.
The package has had no release for about 7 years, despite 12 releases overall and a previously regular median interval of about 16 days. This is strong evidence of inactivity for the assessed version.
There were zero commits and zero active maintainers in the last 3 months, and the repository was last pushed about 5 years ago. This confirms that maintenance has effectively stopped.
There were no new or closed issues or pull requests in the last month, while 9 pull requests remain open. This is consistent with limited current project attention.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
gud Version ^1.0.0 | — | — |
warning Version ^4.0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.