@lottiefiles/lottie-playernpm

Verdict

Looks abandoned

@lottiefiles/lottie-player appears abandoned — its repository has been archived, no commits for 5 months. 28 of 54 open issues have had no reply. Plan a migration rather than waiting for a fix.

health 10/100

Why this verdict?

abandoned — No commits for over 365 days with unanswered issues piling up — or the registry marks it deprecated, or the repository is archived.

repository archived

Judged yesterday from signal heuristics. How each verdict is decided

latest 2.0.12
licence MIT
stars 1,656
checked yesterday
registry ↗
repository ↗

Signals · last 1 check

Commits 90d

Open issues

Unanswered

Contributors

State history 1

When	Change
2026-09-03	first verdict: abandoned

Supply-chain history 1

account hijacked 2024-10 2.0.5, 2.0.6, 2.0.7

A compromised publish token pushed three releases in an hour that injected a crypto-wallet connection prompt into sites embedding the player.

The versions were removed and 2.0.8 published with the same content as 2.0.4.

Source: Snyk analysis, 31 October 2024. History, not a warning about today — the verdict above is about maintenance now.

Badge

Drop this in your README. It re-renders itself as the verdict changes.

[![maintenance](https://isitdeadyet.dev/badge/npm/@lottiefiles/lottie-player.svg)](https://isitdeadyet.dev/npm/@lottiefiles/lottie-player)

Watch it

Get told when @lottiefiles/lottie-player changes state, changes licence, or is deprecated — instead of finding out during an incident.

Free for up to 25 packages. Signing in is a link sent to your email — there is no password to choose.