Every package in every fork's resolved production tree — including the ones no dependency dashboard can see, because they appear in no package.json. Resolved live, never recorded.
34 of 63 time bombs appear in no fork's package.json, so no dependency dashboard in the org shows them. 22 package(s) this org already maintains are still being pulled from the abandoned upstream by 11 fork(s) — repointing those at their siblings is the largest single win available.
Packages with a current @unabandoned fork that forks still resolve from the abandoned original. Self-inflicted, and mechanical to fix.
| Upstream package | State | Last release | Pulled by |
|---|---|---|---|
| buffer | time bomb | 2020-11-23 | @unabandoned/browserify, @unabandoned/deps-sort, @unabandoned/insert-module-globals, @unabandoned/labeled-stream-splicer, @unabandoned/readable-stream, @unabandoned/stream-http, @unabandoned/stream-splicer |
| events | inert | 2021-02-27 | @unabandoned/browserify, @unabandoned/deps-sort, @unabandoned/insert-module-globals, @unabandoned/labeled-stream-splicer, @unabandoned/readable-stream, @unabandoned/stream-http, @unabandoned/stream-splicer |
| readable-stream | time bomb | 2025-01-07 | @unabandoned/browserify, @unabandoned/crypto-browserify, @unabandoned/deps-sort, @unabandoned/insert-module-globals, @unabandoned/labeled-stream-splicer, @unabandoned/stream-http, @unabandoned/stream-splicer |
| string_decoder | time bomb | 2019-08-07 | @unabandoned/browserify, @unabandoned/crypto-browserify, @unabandoned/deps-sort, @unabandoned/insert-module-globals |
| combine-source-map | time bomb | 2017-03-20 | @unabandoned/browser-pack, @unabandoned/browserify, @unabandoned/insert-module-globals |
| browser-resolve | time bomb | 2020-08-03 | @unabandoned/browserify, @unabandoned/module-deps |
| detective | time bomb | 2022-05-27 | @unabandoned/browserify, @unabandoned/module-deps |
| stream-splicer | time bomb | 2019-05-24 | @unabandoned/browserify, @unabandoned/labeled-stream-splicer |
| undeclared-identifiers | time bomb | 2019-02-24 | @unabandoned/browserify, @unabandoned/insert-module-globals |
| browser-pack | time bomb | 2018-03-30 | @unabandoned/browserify |
| browserify-zlib | time bomb | 2017-06-03 | @unabandoned/browserify |
| crypto-browserify | time bomb | 2024-10-22 | @unabandoned/browserify |
| deps-sort | time bomb | 2019-10-29 | @unabandoned/browserify |
| insert-module-globals | time bomb | 2020-10-09 | @unabandoned/browserify |
| labeled-stream-splicer | time bomb | 2019-05-24 | @unabandoned/browserify |
| module-deps | time bomb | 2020-08-03 | @unabandoned/browserify |
| path-browserify | inert | 2020-03-03 | @unabandoned/browserify |
| ret | inert | 2023-03-16 | @unabandoned/randexp |
| stream-http | time bomb | 2021-04-14 | @unabandoned/browserify |
| syntax-error | time bomb | 2018-02-09 | @unabandoned/browserify |
| url | time bomb | 2024-07-26 | @unabandoned/browserify |
| util | time bomb | 2022-10-16 | @unabandoned/browserify |
| Fork | Tree | Time bombs | Invisible | Inert | Alive |
|---|---|---|---|---|---|
| @unabandoned/browserify | 137 | 60 | 46 | 44 | 33 |
| @unabandoned/crypto-browserify | 65 | 35 | 27 | 18 | 12 |
| @unabandoned/util | 28 | 13 | 13 | 9 | 6 |
| @unabandoned/insert-module-globals | 20 | 7 | 4 | 10 | 3 |
| @unabandoned/url | 20 | 7 | 7 | 8 | 5 |
| @unabandoned/deps-sort | 16 | 5 | 4 | 9 | 2 |
| @unabandoned/module-deps | 15 | 3 | 0 | 7 | 5 |
| @unabandoned/browser-pack | 6 | 2 | 0 | 3 | 1 |
| @unabandoned/labeled-stream-splicer | 6 | 2 | 1 | 4 | 0 |
| @unabandoned/stream-http | 5 | 1 | 0 | 4 | 0 |
| @unabandoned/stream-splicer | 5 | 1 | 0 | 4 | 0 |
| @unabandoned/browser-resolve | 7 | 0 | 0 | 4 | 3 |
| @unabandoned/browser-unpack | 2 | 0 | 0 | 1 | 1 |
| @unabandoned/browserify-zlib | 1 | 0 | 0 | 0 | 1 |
| @unabandoned/buffer | 0 | 0 | 0 | 0 | 0 |
| @unabandoned/combine-source-map | 2 | 0 | 0 | 1 | 1 |
| @unabandoned/detective | 3 | 0 | 0 | 1 | 2 |
| @unabandoned/events | 0 | 0 | 0 | 0 | 0 |
| @unabandoned/jsonstream | 1 | 0 | 0 | 1 | 0 |
| @unabandoned/path-browserify | 0 | 0 | 0 | 0 | 0 |
| @unabandoned/randexp | 1 | 0 | 0 | 1 | 0 |
| @unabandoned/readable-stream | 3 | 0 | 0 | 3 | 0 |
| @unabandoned/ret | 0 | 0 | 0 | 0 | 0 |
| @unabandoned/string_decoder | 0 | 0 | 0 | 0 | 0 |
| @unabandoned/syntax-error | 1 | 0 | 0 | 0 | 1 |
| @unabandoned/undeclared-identifiers | 3 | 0 | 0 | 2 | 1 |
| @unabandoned/xml-js | 1 | 0 | 0 | 0 | 1 |
Genuinely external exposure, ranked by how many forks each reaches.
| Package | Forks | Own deps | Last release | Visibility |
|---|---|---|---|---|
| JSONStream | 5 | 1 | 2018-10-14 | direct somewhere |
| call-bind-apply-helpers | 4 | 2 | 2025-02-12 | invisible |
| call-bound | 4 | 2 | 2025-03-03 | invisible |
| dunder-proto | 4 | 3 | 2024-12-17 | invisible |
| get-intrinsic | 4 | 10 | 2025-02-22 | invisible |
| get-proto | 4 | 2 | 2025-01-02 | invisible |
| available-typed-arrays | 3 | 1 | 2024-02-19 | invisible |
| define-data-property | 3 | 3 | 2024-02-13 | invisible |
| for-each | 3 | 1 | 2025-02-11 | invisible |
| has-property-descriptors | 3 | 1 | 2024-02-13 | invisible |
| has-tostringtag | 3 | 1 | 2024-02-01 | invisible |
| set-function-length | 3 | 6 | 2024-03-09 | invisible |
| abort-controller | 2 | 1 | 2019-03-30 | invisible |
| asn1.js | 2 | 3 | 2020-06-18 | invisible |
| browserify-aes | 2 | 6 | 2018-04-03 | invisible |
| browserify-cipher | 2 | 3 | 2018-04-11 | direct somewhere |
| browserify-des | 2 | 4 | 2018-07-10 | invisible |
| browserify-rsa | 2 | 3 | 2024-09-26 | invisible |
| create-ecdh | 2 | 2 | 2020-08-04 | direct somewhere |
| create-hash | 2 | 5 | 2018-04-11 | direct somewhere |
| create-hmac | 2 | 6 | 2018-04-11 | direct somewhere |
| des.js | 2 | 2 | 2023-05-29 | invisible |
| diffie-hellman | 2 | 3 | 2018-04-11 | direct somewhere |
| elliptic | 2 | 7 | 2024-11-13 | invisible |
| evp_bytestokey | 2 | 2 | 2017-09-05 | invisible |
| hash.js | 2 | 2 | 2018-11-30 | invisible |
| hmac-drbg | 2 | 3 | 2017-04-09 | invisible |
| is-regex | 2 | 4 | 2024-12-12 | invisible |
| is-typed-array | 2 | 1 | 2024-12-18 | invisible |
| md5.js | 2 | 3 | 2018-10-02 | invisible |
| miller-rabin | 2 | 2 | 2017-09-27 | invisible |
| public-encrypt | 2 | 6 | 2018-10-01 | direct somewhere |
| randombytes | 2 | 1 | 2019-02-19 | direct somewhere |
| randomfill | 2 | 2 | 2018-02-16 | direct somewhere |
| safe-regex-test | 2 | 3 | 2024-12-12 | invisible |
| sha.js | 2 | 3 | 2025-07-01 | invisible |
| side-channel-map | 2 | 4 | 2024-12-11 | invisible |
| side-channel-weakmap | 2 | 5 | 2024-12-11 | invisible |
| typed-array-buffer | 2 | 3 | 2024-12-18 | invisible |
| assert | 1 | 5 | 2023-09-07 | direct somewhere |
| define-properties | 1 | 3 | 2023-09-13 | invisible |
| is-nan | 1 | 2 | 2020-12-24 | invisible |
| object-is | 1 | 2 | 2024-02-28 | invisible |
| object.assign | 1 | 6 | 2024-12-18 | invisible |