Abandoned Dependency Risk Monitor — Bus Factor, Not CVEs

Flags npm packages at risk of going unmaintained before anything is reported against them: single maintainer, gone quiet. The xz-utils and event-stream incidents both had this exact shape before anyone found a CVE. Sibling to the Dependency Vulnerability Advisor, which checks known CVEs instead.

Publisher description, verbatim

Last 7 dayson this actor

3rank moves
1other change

Each one reaches followers by email the morning after.Follow this actor

Key figures27 readings

Price / 1k$3.00per 1,000 results

Users / 30d1→ 0 over 27 readings

Users, all time2→ 0 over 27 readings

Runs / 30d24↑ 23 over 26 readings

Runs / user / mo24.0runs per monthly user

Store search presence

1top-10 keywords

best #4 for “event stream”

event stream#4

re-crawled daily

Recorded changes

2026-10-20searchKeyword rank moveleft top-3 for “event stream” (#3 → #4)—on record
2026-10-20contentREADME updated+1,789 characters+1,789characters
2026-10-19searchKeyword rank moveentered top-3 for “event stream” (#4 → #3)—on record

showing 3 of 7 in the last 30 days · followers get all 7 by email

History

27 readings since 2026-09-28

Users / 30d27 readings

Users, all time27 readings

Runs / 30d26 readings

Follow this actor, compare it against its rivals, and get every overnight change in one morning report.

Publish it yourself? Claim your publisher page and its full history is yours free, forever.

Open in the app Claim this page

Numbers on this page are measured only by an independent census of the Apify Store — not self-reported.