Package Health

optimism

Composable reactive caching with efficient invalidation.

Latest 0.18.1NPMNPM

62%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

38

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

95

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

63

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Health Score Breakdown

Repo commit activitydanger

The repository recorded zero commits and zero active maintainers in the last three months, strongly indicating that development activity has stopped.

Build provenancecaution

No build attestation, trusted publisher, or staged publishing is present, reducing publication transparency, though this is a hygiene limitation rather than evidence of an unsafe release.

Lifecycle scriptscaution

A prepare script runs during installation, which adds build-time behavior and warrants attention, but this signal alone does not show harmful or unnecessary installation activity.

Maintainerscaution

Only one registry account has publish access, leaving limited publishing redundancy. The repository is user-owned rather than organization-backed, so no organizational compensation is shown.

Project backingcaution

The source repository is owned by an individual account rather than an organization, so the project has limited visible institutional backing.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Direct Dependencies

DependencyLast ReleaseScore
tslib
Version ^2.3.0
—
—
@wry/trie
Version ^0.5.0
—
—
@wry/caches
Version ^1.0.0
—
—
@wry/context
Version ^0.7.0
—
—

Weekly Downloads

Info

Last Published
1 year ago
Created
10 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform