Is It Dead Yet? dependency vitals

event-streamnpm

Signals · last 1 check

Commits 90d
0
Open issues
7
Unanswered
4
Contributors
0
State history 1
WhenChange
2026-09-03 first verdict: abandoned
Supply-chain history 1

  1. account hijacked 2018-11 3.3.6, via flatmap-stream 0.1.1

    Handed to a volunteer maintainer who added the flatmap-stream dependency, which stole from Copay bitcoin wallets.

    The malicious dependency was removed; the package itself remained unmaintained.

    Source: npm advisory and the dominictarr post-mortem, November 2018. History, not a warning about today — the verdict above is about maintenance now.

Badge

maintenance: abandoned

Drop this in your README. It re-renders itself as the verdict changes.

[![maintenance](https://isitdeadyet.dev/badge/npm/event-stream.svg)](https://isitdeadyet.dev/npm/event-stream)

Watch it

Get told when event-stream changes state, changes licence, or is deprecated — instead of finding out during an incident.

Free for up to 25 packages. Signing in is a link sent to your email — there is no password to choose.