react-inspector/cache

The project includes tests, release notes, and organization backing, but its registry history has only one release and no commits in the past three months. Install-time scripts, an MIT repository license conflicting with the Apache-2.0 declaration, and broad unpinned workflow configuration add maintenance and supply-chain concerns.

Latest 0.1.0

Packagist

58%

Total Score

Maintainer Stability

Dependencies

Maturity

Supply Chain

Health Score Breakdown

Dependency profile

Seven runtime dependencies, including the OpenTelemetry stack and an extension requirement, create a meaningful dependency surface for this small package, though the dependencies fit its instrumentation purpose.

License

The package declares Apache-2.0, while the repository license file is detected as MIT, so the licensing information is inconsistent even though both sides provide a license.

Lifecycle scripts

post-install-cmd and post-update-cmd scripts run during dependency installation or updates, increasing operational and supply-chain exposure compared with a package without lifecycle hooks.

Release history

The package is 389 days old but has only one release and no releases in the past 12 months, leaving little evidence of sustained release maintenance.

Repo commit activity

There were no commits and no active maintainers during the past three months, a meaningful warning for a package with only one registry release.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
react/cache Version ^1.2	—	—
open-telemetry/api Version ^1.0	—	—
open-telemetry/sdk Version ^1.0	—	—
open-telemetry/context Version ^1.2	—	—
open-telemetry/sem-conv Version ^1.32	—	—