Clear licensing, release notes, tests, and a focused dependency set support straightforward adoption. The main concern is no commits or releases since December 2023, alongside absent security scanning and unpinned workflow actions.
65%
Total Score
50
100
83
83
The registry namespace and repository owner match, providing consistent ownership context; the owner is an individual rather than an organization, so maintainer capacity appears limited.
The package is mature, with releases dating back to 2016, but it has had no release in the last 12 months and its latest release was in December 2023.
The repository had zero commits and zero active maintainers in the last three months, indicating that maintenance activity has stalled.
There are 9 open issues and no recent issue or pull request activity, which leaves maintenance responsiveness uncertain.
Composer is used for builds, but no security scanning tools were detected, leaving a meaningful security-hygiene gap.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/stream Version ^1.0 || ^0.7 || ^0.6 || ^0.5 || ^0.4 || ^0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.