react/socket

Usable with caveats: this is a mature, licensed package with a matching organization-backed repository, tests, release notes, and no deprecation or archive status. Maintenance has recently slowed, with no commits or issue movement in three months, and the repository lacks a security policy and explicit workflow permissions.

Latest v1.17.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since 2012 with 55 releases, but only one release appeared in the last 12 months despite a historical median interval of about 41 days, indicating slower recent maintenance.

Repo commit activity

The repository recorded zero commits and zero active maintainers over the last three months, a real maintenance concern, although the recent release and repository push show the project is not clearly abandoned.

Repo issue activity

There are only six open issues and six open pull requests, but no new or closed issues or pull requests in the last month, reinforcing the sign of reduced recent activity.

Repo tooling

Composer build tooling is present, but no security scanning tool was detected, leaving a security-process gap in the repository.

Security policy

The repository has no documented security policy, reducing transparency about how vulnerabilities should be reported and handled.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

Christian Lück

Cees-Jan Kiewiet

Jan Sorgalla

Chris Boden

Direct Dependencies

Dependency	Last Release	Score
react/dns Version ^1.13	—	—
react/stream Version ^1.4	—	—
react/promise Version ^3.2 \|\| ^2.6 \|\| ^1.2.1	—	—
react/event-loop Version ^1.2	—	—
evenement/evenement Version ^3.0 \|\| ^2.0 \|\| ^1.0	—	—