wyrihaximus/react-awaitable-observable
The package is small and its source layout is easy to follow. Its release cadence is sparse, recent commit activity is quiet, and install scripts plus broad unpinned workflow permissions add maintenance and supply-chain exposure.
67%
Total Score
63
100
88
67
Health Score Breakdown
post-install-cmd and post-update-cmd scripts run during dependency installation or updates, adding avoidable execution risk for consumers.
Only one registry account has publish access. Because the repository is user-owned rather than organization-backed, this leaves a thin publishing base.
The registry namespace and repository are owned by the same individual user, confirming repository alignment but offering no organizational backing to broaden maintenance capacity.
The package has existed for about 4 years and released twice in the last 12 months, but its median release interval is about 475 days, indicating a sparse cadence.
There were no commits and no active maintainers in the last three months. The recent push and release provide some compensation, but the current implementation activity remains quiet.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Cees-Jan Kiewiet |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 react/async Version ^4.3.0 | — | — |
react/promise Version ^3.3.0 | — | — |
reactivex/rxphp Version ^2.1.0 | — | — |
wyrihaximus/react-event-loop-rx-scheduler-hook-up Version ^0.1.1 | — | — |
Weekly Downloads
Info
- Last Published
- 7 months ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.