laravie/streaming
The small dependency surface, MIT license, repository tests, and release notes make the package easier to adopt. Its source repository remains available and clearly belongs to the package, but pinning this version limits exposure to later changes.
55%
Total Score
75
100
92
50
Health Score Breakdown
The package has had no registry releases in about six years, despite 12 releases overall; this is a substantial maintenance concern for a dependency.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and increasing abandonment risk.
The repository has no security policy, leaving vulnerability-reporting expectations unclear; this is a transparency gap, though it is less serious than the maintenance slowdown.
Both analyzed workflows use unpinned container images with high-confidence findings. There are no untrusted checkouts or script injections, so this is a workflow hygiene concern rather than a severe release risk.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Mior Muhammad Zaki |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 laravie/predis-async Version ^0.3 || ^0.4 | — | — |
Weekly Downloads
Info
- Last Published
- 6 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.