The package includes tests, a substantial README, MIT licensing, and no install-time scripts. Its workflow leaves all three actions unpinned, and the repository has no security policy or scanning, adding maintenance and release-hygiene concerns.
45%
Total Score
50
67
67
The package is about 11 months old but has only two releases, both published within about two days; this provides little evidence of sustained release maintenance.
There were no new or merged pull requests and no new or closed issues in the measured month, offering no evidence of active project interaction.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but these values provide no external sign of adoption or review.
Composer build tooling is present, but no security scanning tools are configured, leaving a meaningful release-hygiene gap.
The repository is not archived, but its last push was about 11 months ago, which supports the concern that maintenance may have stalled.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/http Version ^1.6.0 | — | — |
react/async Version ^4.0.0|^3.1.0 | — | — |
ratchet/pawl Version ^0.4.1 | — | — |
react/socket Version ^1.13 | — | — |
react/promise Version ^2.9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.