wyrihaximus/react-mutex

The project has tests, release notes for this version, and matching MIT licensing. Composer install scripts, broad workflow tokens, and unpinned actions add maintenance and build-hygiene concerns, while recent repository activity is absent.

Latest 3.2.0

Packagist

61%

Total Score

Maintainer Stability

Maturity

Supply Chain

Health Score Breakdown

Lifecycle scripts

The package runs post-install and post-update Composer scripts. These scripts increase installation complexity and supply-chain exposure, even though their presence alone does not show harmful behavior.

Release history

The package has only five releases since February 2019, with no release in the last 12 months and a median interval of about 451 days. This indicates a slow maintenance cadence, though the project is not extremely young.

Repo commit activity

The repository recorded zero commits and zero active maintainers in the last three months. That is a meaningful sign of currently limited maintenance activity, despite the repository not being archived.

Repo tooling

The project uses Make and Composer build tooling, but no security scanning tools were detected. This is a modest transparency and maintenance gap rather than evidence of an unsafe release.

Security policy

The repository has no security policy. That reduces transparency about vulnerability reporting and response expectations.

Vulnerabilities

We didn't find any vulnerabilities for this package.

Package versions

Maintainers

No maintainer information available.

Direct Dependencies

Dependency	Last Release	Score
react/cache Version ^1.1	—	—
react/promise Version ^2.8 \|\| ^3.1	—	—
wyrihaximus/ticking-promise Version ^3.1	—	—
wyrihaximus/react-mutex-contracts Version ^2.2	—	—