coanpm

Verdict

Finished, not abandoned

coa looks complete rather than neglected — no commits for over 7 years. 16 of 25 open issues have had no reply. A library that has stopped changing is not the same as one that has been dropped.

health 25/100

Why this verdict?

finished — No commits for over 365 days, and almost nobody filing new issues — or the README says the project is done.

last commit 2824 days ago
almost no new issues — nobody is waiting on a fix

Judged yesterday from signal heuristics. How each verdict is decided

latest 2.0.2
licence MIT
stars 142
checked yesterday
registry ↗
repository ↗

Signals · last 1 check

Commits 90d

Open issues

Unanswered

Contributors

State history 1

When	Change
2026-09-03	first verdict: finished

Supply-chain history 1

account hijacked 2021-11

Hijacked and published with a credential-stealing payload, in the same wave as rc.

Malicious versions removed; the package was already effectively unmaintained.

Source: npm advisory, November 2021. History, not a warning about today — the verdict above is about maintenance now.

Badge

Drop this in your README. It re-renders itself as the verdict changes.

[![maintenance](https://isitdeadyet.dev/badge/npm/coa.svg)](https://isitdeadyet.dev/npm/coa)

Watch it

Get told when coa changes state, changes licence, or is deprecated — instead of finding out during an incident.

Free for up to 25 packages. Signing in is a link sent to your email — there is no password to choose.