Event emitter
18%
Total Score
50
100
67
75
npm marks the package deprecated at package scope and explicitly directs consumers to the renamed component-emitter package. This is a decisive adoption risk even though the release itself is stable.
The package has had no registry release in nearly three years, despite a long history and 12 total releases. That supports the deprecation concern and indicates no ongoing release maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, with its last push in December 2023. This indicates dormant maintenance rather than active support.
The linked repository name does not match emitter-component and its README does not mention the package. Although this can occur with renamed or sub-package repositories, the ownership relationship is less transparent.
The single workflow was fully analyzed with no reported findings or untrusted triggers, but both of its two action references are unpinned. That leaves avoidable workflow reproducibility and supply-chain hygiene risk.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.