58%
Total Score
caution
Usable with caveats: no releases or commits for about two years, despite a matching organization-backed repository.
There were no commits and no active maintainers in the last three months, with the latest broader activity also about two years old. This materially raises abandonment risk.
The artifact includes a README, but it contains only 6 characters and offers virtually no consumer guidance. Missing tests and a changelog in the published artifact are normal packaging practice.
The package has 40 releases, but all releases occurred in a brief period ending about two years ago and there have been none in the last 12 months. This indicates a potentially abandoned release line.
The repository has 0 stars, 1 fork, and 1 watcher, indicating very limited visible adoption. Popularity is supporting evidence rather than a verdict, so this is a modest concern.
Composer is used as the build tool, but no security scanning tools are configured. The missing security tooling is a hygiene gap rather than evidence of unsafe code.
We didn't find any vulnerabilities for this package.
| Dependency | Last Release | Score |
|---|---|---|
react/promise Version ^3.1 | — | — |
react/event-loop Version ^1.5 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.