react/espresso
Silex wired with radioactive caffeine.
38%
Total Score
unhealthy
Risky: no registry release since 2012 and no recent repository commits indicate a largely abandoned package.
Health Score Breakdown
The package has had no release in about 14 years, with zero releases in the last 12 months. This is strong evidence of abandonment despite its earlier regular release interval.
The repository recorded zero commits and zero active maintainers in the last three months, reinforcing the long gap since the latest release.
Composer is used for builds, but no security scanning tooling is present. The missing scanning is a modest hygiene gap, not evidence that the package is unsafe.
The repository has no security policy, reducing transparency about vulnerability reporting. This matters, but it is outweighed by the clearer licensing and matching source repository.
Version v0.2.1 is not a prerelease, but it remains below 1.0, so its API maturity is less certain; this is secondary to the much older maintenance history.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
No maintainer information available.
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 react/http Version 0.2.* | — | — |
silex/silex Version 1.0.* | — | — |
Weekly Downloads
Info
- Last Published
- 14 years ago
- Created
- 14 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.