A websocket transport for GraphQL subscriptions
12%
Total Score
critical
Unfit to use: the package is deprecated and its source repository is archived.
The package is explicitly deprecated at the registry level because it is no longer maintained, with graphql-ws recommended as the replacement. This is a severe adoption risk for a dependency.
There have been no releases in the last 12 months, while the latest release was in November 2021. The long release history shows maturity, but it does not offset the current halt in publishing.
The repository recorded zero commits and zero active maintainers in the last 3 months, confirming the absence of ongoing development.
The linked repository is archived, despite a last push in April 2023, indicating the project is no longer accepting normal maintenance activity.
The repository is owned by an organization, providing historical project backing, but that does not compensate for the repository being archived and the package being deprecated.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
ws Version ^5.2.0 || ^6.0.0 || ^7.0.0 | — | — |
backo2 Version ^1.0.2 | — | — |
iterall Version ^1.2.1 | — | — |
eventemitter3 Version ^3.1.0 | — | — |
symbol-observable Version ^1.0.4 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.