react/stream

Usable with caveats: this is a mature, clearly licensed package with a matching organization-backed repository, tests, release notes, and no deprecation. Adoption should account for no registry release in over two years and no commits or active maintainers in the last three months.

Latest v1.4.0

Packagist

72%

Total Score

Maintainer Stability

Dependencies

100

Maturity

Supply Chain

Health Score Breakdown

Release history

The package has existed since 2012 with 37 releases, but its latest registry release was in June 2024 and there were no releases in the last 12 months. That long release gap lowers confidence in current maintenance despite the strong historical record.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. This is a meaningful current-maintenance concern, especially alongside more than two years without a registry release.

Repo issue activity

There are only two open issues and four open pull requests, with no issues or pull requests opened or merged in the last month. The small backlog is not severe, but the lack of recent activity supports caution about responsiveness.

Repo tooling

Composer build tooling is present, but no security-scanning tooling was detected. This is a modest transparency and maintenance gap rather than a severe risk because the repository has CI-related files and a simple package structure.

Security policy

The repository has no security policy. That weakens vulnerability-reporting transparency, though it is a secondary concern for this small, mature library.