A polyfill for http://www.w3.org/TR/eventsource/
55%
Total Score
25
100
83
83
50
There were zero commits and zero active maintainers in the last three months. Combined with no registry releases in the last year, this is strong evidence of stalled maintenance.
The release has no build attestation or trusted-publisher provenance. This is a transparency limitation, but it is not by itself evidence that the release is unsafe or abandoned.
The package has 40 releases and a long history, but it has had no releases in the last 12 months; the latest release was published in August 2022. This materially lowers confidence in active maintenance.
The repository has 41 open issues and two open pull requests, but no issues or pull requests were opened or closed in the last month. The unresolved queue and inactivity add maintenance concern.
The repository uses build tooling including Grunt, webpack, and npm scripts, which supports a structured project. It has no security-scanning tools, leaving a modest maintenance-hygiene gap.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.