Ethereum web3 interface.
58%
Total Score
caution
Usable with caveats: no commits or releases for over a year raises abandonment risk.
The repository recorded zero commits and zero active maintainers in the last three months, which is strong evidence that maintenance has stalled.
Twelve runtime dependencies, including several asynchronous networking components, create a meaningful maintenance and transitive supply-chain surface for this library.
The package is 609 days old with only three releases, and it has had no release in the last 12 months. The latest release arrived shortly after the first, indicating a brief release burst followed by inactivity.
Composer build tooling is present, but no security scanning tools were detected, leaving automated vulnerability coverage unconfirmed.
The repository has no security policy, reducing transparency about how maintainers receive and handle vulnerability reports.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/http Version ^1.6.0 | — | — |
react/async Version ^4.0.0|^3.1.0 | — | — |
ratchet/pawl Version ^0.4.1 | — | — |
react/socket Version ^1.13 | — | — |
react/promise Version ^2.9.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.