Is It Dead Yet? dependency vitals

@antv/x6npm

Signals · last 1 check

Commits 90d
5
Open issues
138
Unanswered
18
Contributors
18
State history 1
WhenChange
2026-09-03 first verdict: active
Supply-chain history 1

  1. account hijacked 2026-05 3.2.7, 3.3.7

    One maintainer account with broad publishing rights republished hundreds of packages in twenty minutes with a pre-install step that ran a credential-stealing worm.

    Removed; the stolen tokens had already created over 2,700 rogue repositories.

    Source: Aikido analysis, 19 May 2026. History, not a warning about today — the verdict above is about maintenance now.

Badge

maintenance: active

Drop this in your README. It re-renders itself as the verdict changes.

[![maintenance](https://isitdeadyet.dev/badge/npm/@antv/x6.svg)](https://isitdeadyet.dev/npm/@antv/x6)

Watch it

Get told when @antv/x6 changes state, changes licence, or is deprecated — instead of finding out during an incident.

Free for up to 25 packages. Signing in is a link sent to your email — there is no password to choose.