Integration details are clear and the package is properly licensed. Maintenance activity is currently quiet, with no commits or issue resolution in three months; workflow references are also unpinned.
58%
Total Score
50
92
50
The package has existed for over eight years with 82 releases, but only 2 releases in the last 12 months, indicating a slower current cadence.
The repository recorded no commits and no active maintainers in the last three months, which is a meaningful maintenance concern despite the recent release and repository push.
There were no new or closed issues and no merged pull requests in the last month, alongside 76 open issues, suggesting limited current project activity.
The repository has no published security policy, which reduces transparency for reporting and handling vulnerabilities in an API client.
The sole workflow uses read-only permissions and has no detected dangerous findings, but both analyzed action references are unpinned, leaving avoidable build-integrity exposure.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
ratchet/pawl Version ^0.4.0 | — | — |
react/socket Version ^1.0 || ^0.8 || ^0.7 | — | — |
ratchet/rfc6455 Version ^0.3 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.