joelbutcher/socialstream

Unfit to use for a new dependency: the package is deprecated and its source repository is archived, with no commits or releases in the last year. It has good documentation, tests, licensing, and a substantial release history, but those positives do not offset the clear abandonment risk.

Latest v5.0.0-beta1.1

Packagist

18%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Are you affected? Scan for Free

Health Score Breakdown

Registry deprecation

Packagist marks the entire package as abandoned, with no replacement specified. Package-wide deprecation is a severe warning against taking a new dependency.

Release history

The package has a substantial history of 123 releases over roughly 5 years, but it has had no releases in the last 12 months. The historical maturity is positive, while the current inactivity is a serious concern.

Repo commit activity

The repository recorded 0 commits and 0 active maintainers in the last 3 months, consistent with the archived status and indicating no current maintenance capacity.

Repository archived

The linked repository is archived, which indicates development has ended; its last push was on May 10, 2025. This is a severe maintenance and abandonment risk.

Dangerous workflows

One of eight workflows uses pull_request_target, creating a workflow-risk area that warrants review. No untrusted checkout or script-injection patterns were detected, which limits the concern.

Vulnerabilities

Title	Versions	Severity
CVE-2024-56329 joelbutcher/socialstream is vulnerable to Improper Authentication in versions 6.0.0 - 6.2.0 and 0.0.0 - 5.6.0.	0.0.0 - 5.6.06.0.0 - 6.2.0	High