No commits were recorded in the last three months, and the repository has one star, no tests, and no security policy. The MIT declaration, README, and unarchived repository provide useful transparency.
42%
Total Score
75
100
71
75
The package is flagged as borrowing the identity of react/promise, which has far more downloads and stable releases; the lack of fork disclosure makes consumer confusion a serious risk.
Only two releases exist, with the latest published about 19 months ago and no releases in the last 12 months, indicating weak ongoing maintenance.
The repository recorded zero commits and zero active maintainers over the last three months, providing no recent evidence of active maintenance.
The repository has one star, zero forks, and zero watchers, so there is little community evidence to offset the limited release and commit activity.
The repository has no security policy, leaving vulnerability-reporting expectations unclear for a database integration package.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/async Version ^4 || ^3 || ^2 | — | — |
illuminate/database Version ^11.19 | — | — |
reactphp-x/mysql-pool Version ^2.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.