The stable MIT release is small and has no install-time scripts. Use simple-bus/message-bus instead, which the registry names as the replacement.
10%
Total Score
0
42
100
The registry marks the entire package as deprecated and names simple-bus/message-bus as its replacement. Package-level deprecation is a severe adoption risk because future maintenance and support should not be expected.
The package has only two releases, both published on November 7, 2014, and none in the last 12 months; the package is over 11 years old. This strongly supports the deprecation and abandonment concerns.
The repository recorded zero commits and zero active maintainers in the last three months. This confirms there is no current maintenance activity to offset the archived status.
The linked repository is archived, with its last push on January 13, 2015. An archived source project is no longer actively maintained and is a severe dependency risk.
The linked repository name does not match the package name and its README does not mention the package. Although the organization context reduces the mismatch concern, the repository relationship is not clearly documented.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
beberlei/assert Version ~2.0 | — | — |
simple-bus/event-bus Version ~1.0 | — | — |
simple-bus/command-bus Version ~1.0 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.