Tag
unmaintained-packages
Safeguard articles tagged "unmaintained-packages" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Open Source
isomorphic-fetch: Security Review and Modern Alternatives
isomorphic-fetch has not shipped a release since 2020, yet thousands of projects still install it. What that means for your security posture, and what to use instead.
May 8, 20256 min read
Open Source
rn-fetch-blob: Maintenance Status, Risks, and Alternatives
The rn-fetch-blob npm package hasn't shipped a release since 2020. Here's what that means for React Native apps still depending on it, and how to migrate to react-native-blob-util.
Mar 12, 20256 min read