legionth/http-server-react
Tests, a changelog, a clear MIT license, and no install scripts support the package. It has been abandoned for more than nine years, with no recent commits or releases, so use the named replacement instead.
15%
Total Score
33
58
75
Health Score Breakdown
Packagist marks the package abandoned and explicitly names react/http as its replacement. This is a severe adoption risk for a new dependency.
The latest release was in January 2017, with no releases in the last 12 months despite the package being nearly ten years old. That strongly indicates abandonment.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the long release gap and abandoned status.
Only one registry account has publish access. The repository is user-owned, so this indicates a thin maintainer base rather than organization-backed continuity.
There are five open issues but no new or closed issues and no pull-request activity in the last month, indicating unresolved maintenance needs.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Niels Theen |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 react/dns Version 0.3.*|0.4.* | — | — |
react/socket Version 0.3.*|0.4.* | — | — |
react/stream Version 0.3.*|0.4.* | — | — |
react/promise Version ~1.0|~2.0 | — | — |
react/event-loop Version 0.3.*|0.4.* | — | — |
Weekly Downloads
Info
- Last Published
- 9 years ago
- Created
- 9 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.