MIT licensing, tests, documentation, and release notes make the package straightforward to evaluate. Its source remains available and the release has no install-time scripts, but compatibility with current dependencies is uncertain.
42%
Total Score
25
63
100
The package has had no release in about 11 years and none in the last 12 months, despite five total releases. Its historical cadence was regular enough to show an established project, but current abandonment risk dominates.
The repository recorded zero commits and zero active maintainers in the last 3 months, indicating no current maintenance activity. This reinforces the long release gap rather than showing a temporary pause.
There were no new or closed issues or pull requests in the last month, while three issues and two pull requests remain open. This provides additional evidence that project activity has stalled.
The repository is not archived, so it remains available for inspection and possible maintenance. However, its last push was in July 2021, which is still materially stale for a dependency.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/socket Version >=0.2, <0.4 | — | — |
react/stream Version >=0.2, <0.4 | — | — |
react/promise Version 1.* | — | — |
react/datagram Version ~1.0 | — | — |
clue/socket-raw Version 1.* | 0.1.* | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.