always-open/shipengine
Wrapper around ShipEngine API
58%
Total Score
caution
Usable with caveats: no releases or commits for about two and a half years, despite solid package documentation and tests.
Health Score Breakdown
The package has 31 releases since August 2022, but none in the last 12 months and its latest release was in February 2024; this indicates substantial staleness for an API integration.
The repository had zero commits and zero active maintainers in the three months before collection, reinforcing the release-history evidence of a project that is no longer actively maintained.
The repository has only 3 stars, 2 forks, and 5 watchers. Low popularity is supporting evidence of a small project rather than a verdict, but it provides little external confidence to offset inactivity.
All four workflows were analyzed successfully with no untrusted checkout or script-injection paths, but two high-confidence unpinned-image findings and five unpinned action references leave build inputs exposed to drift.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Always Open |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 guzzlehttp/guzzle Version ^7.4 | — | — |
illuminate/support Version ^9.0|^10.0 | — | — |
symfony/serializer Version ^6.0 | — | — |
illuminate/contracts Version ^9.0|^10.0 | — | — |
symfony/property-access Version ^6.0 | — | — |
Weekly Downloads
Info
- Last Published
- 2 years ago
- Created
- 4 years ago
Get secure today,
quickly and for free.
Secure your code, cloud, and runtime in one central system. Connect a repo to discover what the reasoning agents find in your codebase.
No credit card required | Scan results in 32 seconds.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPAuthorized© All Intel data is openly available and commercially licensed.