The package includes a clear README, changelog, tests in its repository, and matching MIT licensing. Its small, inactive project has no security policy or scanning, so maintenance and oversight are limited.
68%
Total Score
50
100
83
75
The repository is owned by a user account rather than an organization, providing less visible institutional backing for a package whose recent activity has stopped.
The package has 33 releases since June 2020, but none in the last 12 months; the latest release was published roughly 18 months ago, indicating slowed maintenance.
The repository recorded zero commits and zero active maintainers in the last three months, consistent with the release-history evidence of stalled maintenance.
The repository has zero stars, forks, and watchers. Popularity is only supporting evidence, but this provides little visible community backing alongside the inactive activity.
Composer is used for builds, but no security-scanning tools were detected, leaving limited automated evidence of ongoing security oversight.
We didn't find any vulnerabilities for this package.
No maintainer information available.
| Dependency | Last Release | Score |
|---|---|---|
react/cache Version ^1.0 || ^0.6 || ^0.5 | — | — |
react/promise Version ^3.0 || ^2.7 || ^1.2.1 | — | — |
react/event-loop Version ^1.0 || ^0.5 | — | — |
react/promise-timer Version ^1.2 | — | — |
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.