Package Health

@fastify/send

Clear documentation, TypeScript declarations, and a tested source tree make integration straightforward. The small runtime dependency set and read-only, fully analyzed workflows further reduce maintenance and operational concerns; the missing build attestation is a minor limitation.

Latest 4.1.1NPMNPM

88%

Total Score

Maintainer Stability
Maintainer Stability
Assesses the consistency and reliability of package maintainers

100

Dependencies
Dependencies
Evaluates the health and security of package dependencies

100

Maturity
Maturity
Indicates package age, release frequency, and adoption metrics

100

Supply Chain
Supply Chain
Evaluates supply chain security practices and risks

100

Attestations
Attestations
Measures the presence and validity of package attestations and signatures

50

Are you affected? Scan for Free

Health Score Breakdown

Build provenancecaution

No build attestation or trusted-publisher provenance was provided, which limits release reproducibility and publication transparency despite the otherwise complete project evidence.

Vulnerabilities

TitleVersionsSeverity
AIKIDO-2024-10271
@fastify/send is vulnerable to Cross-site Scripting (XSS) in versions 3.0.0 - 3.1.0.
3.0.0 - 3.1.0
Medium

Package versions

Direct Dependencies

DependencyLast ReleaseScore
mime
Version ^3
—
—
@lukeed/ms
Version ^2.0.2
—
—
escape-html
Version ~1.0.3
—
—
http-errors
Version ^2.0.0
—
—
fast-decode-uri-component
Version ^1.0.1
—
—

Weekly Downloads

Info

Last Published
1 month ago
Created
3 years ago
Unpacked Size
0.2 MB

Are You Affected?

Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.

Free. No credit card required.

Aikido Platform