send
Better streaming static file server with Range and conditional-GET support
78%
Total Score
67
100
100
100
50
Health Score Breakdown
No registry build attestation or trusted publisher is recorded, leaving publication provenance less transparent than it could be.
The repository recorded zero commits and zero active maintainers in the last three months, which is a real maintenance concern. The recent release and June 2026 push provide compensating evidence against treating this as abandonment.
There were no issues closed in the last month and no pull requests merged, indicating limited recent throughput. One new pull request and 19 open pull requests provide some evidence of ongoing attention but do not offset the quiet resolution rate completely.
Vulnerabilities
| Title | Versions | Severity |
|---|---|---|
AIKIDO-2024-10253 send is vulnerable to Cross-site Scripting (XSS) in versions 0.9.0 - 0.18.0 and 1.0.0 - 1.0.0. | 0.9.0 - 0.18.01.0.0 - 1.0.0 | Medium |
CVE-2015-8859 send is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in versions 0.0.0 - 0.11.1. | 0.0.0 - 0.11.1 | Medium |
CVE-2014-6394 send is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 0.8.4. | 0.0.0 - 0.8.4 | High |
Package versions
Maintainers
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 ms Version ^2.1.3 | — | — |
etag Version ^1.8.1 | — | — |
debug Version ^4.4.3 | — | — |
fresh Version ^2.0.0 | — | — |
statuses Version ^2.0.2 | — | — |
Weekly Downloads
Info
- Last Published
- 10 months ago
- Created
- 14 years ago
- Unpacked Size
- 0.1 MB
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.