Is It Dead Yet? dependency vitals

@asyncapi/generatornpm

Signals · last 1 check

Commits 90d
44
Open issues
35
Unanswered
1
Contributors
19
State history 1
WhenChange
2026-09-03 first verdict: active
Supply-chain history 1

  1. malicious release 2026-07 3.3.1

    A pull_request_target workflow was exploited to take over the release bot, so the legitimate pipeline published backdoored packages with valid provenance.

    Removed; the payload had fetched its second stage over IPFS.

    Source: Datadog Security Labs and Aikido analyses, 14 July 2026. History, not a warning about today — the verdict above is about maintenance now.

Badge

maintenance: active

Drop this in your README. It re-renders itself as the verdict changes.

[![maintenance](https://isitdeadyet.dev/badge/npm/@asyncapi/generator.svg)](https://isitdeadyet.dev/npm/@asyncapi/generator)

Watch it

Get told when @asyncapi/generator changes state, changes licence, or is deprecated — instead of finding out during an incident.

Free for up to 25 packages. Signing in is a link sent to your email — there is no password to choose.