wyrihaximus/react-cache-key-prefix
The repository has tests, release notes, and working build and dependency-scanning tooling, but no security policy. Its workflow audit found an untrusted checkout with broad write permissions and all 28 action references are unpinned; the repository also does not identify this package in its README.
58%
Total Score
50
100
88
50
Health Score Breakdown
The package runs post-install and post-update Composer scripts. These add installation complexity and supply-chain exposure compared with a package without lifecycle hooks.
The package is backed by an individual repository owner rather than an organization, so the single-person maintenance model provides limited redundancy.
The package has only three releases, with the latest about four years ago and no releases in the last 12 months. That is a meaningful maintenance and abandonment concern.
There were no commits and no active maintainers in the last three months. Combined with the old latest release, this weakens evidence of ongoing maintenance.
The repository name does not match the package name and its README does not mention the package, so the source-package relationship is less transparent than expected.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Cees-Jan Kiewiet |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 react/cache Version ^1.0.0 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 7 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.