jeroen/post-request-sender
It has a clear README, tests, licensing, and modest dependencies. The lone workflow is fully analyzed with no dangerous findings, but its seven actions are unpinned and the repository has no security policy.
62%
Total Score
100
94
67
Health Score Breakdown
Only three releases exist, all concentrated around early February 2022, with no release in the last 12 months. The package may be stable, but its registry maintenance is currently inactive.
No repository security policy was found, leaving vulnerability reporting and response expectations undocumented.
The workflow audit analyzed the only workflow completely and found no dangerous triggers, untrusted checkouts, script injection, or audit findings. However, all seven action references are unpinned, which is a supply-chain hygiene weakness.
Vulnerabilities
We didn't find any vulnerabilities for this package.
Package versions
Maintainers
 Jeroen De Dauw |
Direct Dependencies
| Dependency | Last Release | Score |
|---|---|---|
 psr/log Version ^3|^2|^1 | — | — |
Weekly Downloads
Info
- Last Published
- 4 years ago
- Created
- 4 years ago
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001CompliantISO 42001Compliant
FedRAMPImplementing© All Intel data is openly available and commercially licensed.